Optimism network-based decentralized credit market Exactly Protocol became the target of exploitation on August 18th. The breach resulted in a significant drop in the platform’s total value locked (TVL). Meanwhile, Exactly’s recently-announced native token – EXA – slumped by more than 27% over the past day. The protocol was halted temporarily. Another DeFi Project Hacked Blockchain...Read More
The second-largest decentralized exchange on the newly released Base blockchain – RocketSwap – announced eliminating any existing high risks and vulnerabilities a day after sustaining a “brute force hack of the server” where the platform stored its private keys. The RocketSwap team confirmed relinquishing minting rights, which is part of its recovery plan. In a...Read More
On the 13th of August, DeFi project Zunami Protocol was attacked by bad actors, resulting in an estimated loss of $2.1 million. A decentralized revenue aggregator project allowing users to stake stablecoins for yield, the exploit of Zunami focused on its Curve pools, adding one more victim to the list of protocols affected by the...Read More
Crypto infrastructure giant Fireblocks has publicly revealed security vulnerabilities in the technology used by over a dozen major digital asset wallet providers. If unaddressed, the company warned that attackers could exploit the bugs to steal from millions of customers. The Bitforge Exploits The set of vulnerabilities – collectively referred to as “Bitforge” – apply to...Read More
Cypher Protocol, a Solana-based futures DEX, has been forced to pause its smart contract in the wake of an exploit that resulted in a loss of more than $1 million. The Why Late last night, Cypher’s devs announced that they had suffered a “security incident”, resulting in the need to pause their smart contract until...Read More
The hackers behind the recent exploit of several pools on the decentralized exchange Curve Finance have returned approximately 73% of the stolen crypto assets, accounting for about $52.3 million. Blockchain security firm PeckShield revealed Monday that Curve Finance lost $73.5 million in the hack. With the amount recovered so far, the exchange is looking to...Read More
Decentralized exchange Curve Finance has teamed up with Metronome and Alchemix to offer a 10% bug bounty to the attackers behind the recent exploit that saw more than $50 million siphoned off the platforms’ pools. According to an on-chain message on one hacker’s Ethereum address, the protocols are willing to cease the pursuit of the...Read More
On July 30, Curve Finance suffered exploits on a number of its stable pools that were using Vyper, which is a smart contract programming language for the Ethereum Virtual Machine (EVM). Curve alerted its users that alETH, msETH, and pETH stable pools using Vyper 0.2.15 have been exploited “as a result of a malfunctioning reentrancy...Read More
Cybercriminals are increasingly moving away from ransomware attacks and opting for a more covert strategy of utilizing stolen computing power to mine digital currency. To increase their likelihood of success, these malicious entities constantly vary their tools, tactics, and procedures, remaining adaptive and evasive in their approach. According to SonicWall, the publisher of cyberattack intelligence...Read More
North Korean state-sponsored Lazarus Group continues to wreak havoc in the crypto space. CoinsPaid has accused the threat actor of orchestrating the cyber attack on its internal systems. The platform lost $37.3 million in the process but did not shed light on the details of the theft. In response to the attack on July 22,...Read More
On the 25th of July, EraLend was hit by a reentrancy attack that allowed an unknown bad actor to make off with about $3.4 million worth of crypto. A reentrancy attack, a type of cyberattack affecting smart contracts, is one of the most common exploits against DeFi protocols. In it, a bad actor identifies a...Read More
The losses incurred by crypto payments processor Alphapo during its security breach are now estimated to be $60 million, roughly two days after hackers exploited the platform’s hot wallets. According to an update provided by on-chain sleuth ZachXBT, an additional $37 million compromised during the hack on Tron and Bitcoin has been located, increasing the...Read More
A security outfit led by ethical hackers who specialize in security audits claimed to be offered a $500 bounty by DxSale Network, a decentralized token launchpad, after informing the platform of a breach that could cost it over $5 million. The reward is one of the lowest ever offered to a white hat hacker. $500...Read More
The recently hacked cross-chain router protocol Multichain announced it is shutting down its operations, citing a lack of operational funds and information about its CEO Zhaojun, who is in the custody of Chinese police. The latest update provided by the team confirmed the rumors about the exec’s arrest. On July 14, Multichain took to Twitter...Read More
Non-custodial decentralized finance (DeFi) protocol, Arcadia Finance, is the latest victim of a $455,000 exploit that occurred on both the Ethereum and Optimism networks. Confirming the hack, Arcadia revealed that it is working with security partners to minimize the damage after pausing the contracts. The platform has also roped in law enforcement to deal with...Read More
Changpeng Zhao (CZ), the CEO and founder of leading crypto exchange Binance, announced that his company’s users, assets, and platform were unaffected by the recent hack on the cross-chain router protocol Multichain. The Binance boss tweeted that the exchange had finalized all asset swaps and closed deposits a while before the incident occurred. Binance Unaffected...Read More
The Federal Bureau of Investigation (FBI) reportedly searched the residence of Jesse Powell – founder and former CEO of crypto exchange Kraken – earlier this year. The investigation came a few months after a nonprofit organization accused him of hacking and cyberstalking activities. The FBI has targeted other crypto-related individuals in the recent past, with...Read More
Cryptocurrency exchange Bitfinex has recovered some of the funds it lost after being hacked in August 2016. The recovered assets will be used to compensate holders of the exchange’s Recovery Right Tokens (RRTs), which were issued to impacted creditors after the security breach. How Much Was Recovered? As announced by Bitfinex on Thursday, the United...Read More
Two teenage boys from Hamilton, Ontario, have been busted for allegedly stealing over $4 million worth of bitcoin (BTC) and ether (ETH) from an American man through what authorities described as a “spear phishing attack.” According to local reports, Hamilton police started working with the United States Federal Bureau of Investigations (FBI) and the Secret...Read More
NFTs continue to attract not only more users but also capture the eyes of fraudulent entities. Web3 threat actors have set their sights on digital collectibles, with millions of funds being lost through different scams and attacks. A new report suggested that such thefts in the NFT space declined in June but remain rampant. NFT...Read More
The cross-chain decentralized finance (DeFi) platform – Poly Network – announced on Twitter that it had halted operations due to a “recent attack.” The team revealed that the exploit affected 57 cryptocurrencies on 10 blockchains, advising users to “promptly withdraw liquidity from decentralized exchanges.” Poly Network experienced another similar hack in 2021 when wrongdoers drained...Read More
TRM Labs, a leading blockchain analysis firm focused on preventing cybercrime, has released a comprehensive report on the illicit sums lost to bad actors in the crypto space in 2022. The figures are quite notable, especially given the declining prices and interest in the market last year. Improved Cybersecurity Measures In spite of the plummeting...Read More
In yet another case of a rug pull, Arbitrum-based Chibi Finance reportedly siphoned more than $1 million worth of various crypto assets. Notably, the protocol went live on Tuesday, but the developers managed to launder the stolen funds to other networks shortly after. On-chain analysis conducted by blockchain security platform CertiK revealed that Chibi devs...Read More
Joseph James O’Connor, a U.K. citizen and one of the perpetrators of the 2020 Twitter hack, has been sentenced to five years in prison for his role in several cybercrime offenses. According to a press release by the United States Attorney’s Office for the Southern District of New York, Judge Jed S. Rakoff sentenced O’Connor...Read More
Hackers who targeted Atomic Wallet earlier this month are laundering large sums of stolen XRP through centralized exchanges, on-chain data shows. According to xrpforensics on Twitter, the hackers began “heavily laundering funds,” on Monday, spawning new blockchain addresses to avoid blocklists established by crypto exchanges. “We’re monitoring and working closely with exchanges to try and...Read More
After making off with $35 million worth of ill-gotten crypto, the hackers who targeted Atomic Wallet earlier this month have covered their on-chain tracks using the cross-chain liquidity protocol THORChain. According to the crypto tracking platform MistTrack, the hacker’s address transferred 503 Ether (ETH) to THORChain over the past two days. Those funds were then...Read More
The crypto assets stolen during the Atomic Wallet hack have found their way to the sanctioned Russia-based cryptocurrency exchange Garantex, with the attackers trading the tokens for Bitcoin (BTC). According to a tweet from blockchain analytics provider Elliptic, the hackers, believed to be part of the North Korean notorious Lazarus Group, have turned to Garantex...Read More
Sturdy Finance – a DeFi project promising up to 10x leverage on staked assets – has been exploited by a hit-and-run attack on its pricing oracle. Although the amount stolen (worth about $800k at the time this article was written) pales in comparison to other, more high-profile attacks like the one on Atomic Wallet users...Read More
The stolen funds from the Atomic Wallet hack have been traced to a coin mixer used to launder crypto assets swiped by North Korea’s notorious Lazarus Group. Nearly $35 million worth of crypto assets were drained from users of the centralized wallet service since June 2. According to the investigation team at Elliptic, the stolen...Read More
The week started on a grim note following the large-scale theft of digital assets from Atomic Wallet users resulting in a six-figure loss across different chains. Distraught users have taken to Twitter to challenge some of the Atomic Wallet’s claims after the company assured them that it is working with “leading security companies” and has...Read More
