DeFi hacks [history] - page 10. | Bitcointalksearch.org

Aliem Nur

member

Activity: 434

Merit: 16

A leading provider of scaling solutions for Web3 g

Quote from: zasad@ on October 07, 2022, 10:44:41 AM

BNB BRIDGE - REKT $80M
https://rekt.news/bnb-bridge-rekt/
"2M BNB stolen in a hack as complex as Binance’s naming system.

BSC Token Hub, the BNB bridge between the old Binance Beacon Chain and BSC, now BNB Chain… was exploited into minting two lots of 1M BNB directly to the hacker’s address."

BNB Chain Resumes Activity After 2 Million Token Exploit
https://decrypt.co/111448/bnb-chain-resumes-activity-2-million-token-exploit

this is the latest, I'm really shocked about BNBChain getting hacked when Binance is also very massive working on the project,
and of course this is like a blow to CZ, because it's a very large number, reportedly the BNBChain network will be paused for the next few hours,
is it when is this back to normal again?.

Daltonik

legendary

Activity: 2618

Merit: 1505

Quote from: zasad@ on October 07, 2022, 10:44:41 AM

BNB BRIDGE - REKT $80M
https://rekt.news/bnb-bridge-rekt/
"2M BNB stolen in a hack as complex as Binance’s naming system.

BSC Token Hub, the BNB bridge between the old Binance Beacon Chain and BSC, now BNB Chain… was exploited into minting two lots of 1M BNB directly to the hacker’s address."

BNB Chain Resumes Activity After 2 Million Token Exploit
https://decrypt.co/111448/bnb-chain-resumes-activity-2-million-token-exploit

After the incident with the hacking of the BSC Token Hub bridge, the BSC development team proposed holding a vote on chain management on the following issues:
1. Should hacked funds be frozen or not?
2. Do I need to use automatic BNB burning to cover the remaining hacked funds or not?
3. Conducting a Whitehat program for future detected errors, $1 million for each significant error detected.
4. Announcement of a reward for the capture of hackers, up to 10% of the funds returned.
The BSC validator voting feature for general opinion will be enabled in the next few days as a result of the BNB Beacon Chain update.

Source: https://www.bnbchain.org/en/blog/bnb-chain-ecosystem-update/

zasad@

legendary

Activity: 2016

Merit: 4765

BNB BRIDGE - REKT $80M
https://rekt.news/bnb-bridge-rekt/
"2M BNB stolen in a hack as complex as Binance’s naming system.

BSC Token Hub, the BNB bridge between the old Binance Beacon Chain and BSC, now BNB Chain… was exploited into minting two lots of 1M BNB directly to the hacker’s address."

BNB Chain Resumes Activity After 2 Million Token Exploit
https://decrypt.co/111448/bnb-chain-resumes-activity-2-million-token-exploit

RussiaUkraineTranslation

jr. member

Activity: 224

Merit: 1

Lately the target for hacks have been bridges because that is where the most money is. Audited DeFi platforms like MAXX finance and HEX are secure and well tested.

zasad@

legendary

Activity: 2016

Merit: 4765

Transit Swap loses over $21M

https://cointelegraph.com/news/transit-swap-loses-over-21m-due-to-internal-bug-hack-issues-apology
Transit Swap loses over $21M due to code bug exploit, issues apology

https://www.coindesk.com/business/2022/10/03/transit-swap-exploiter-returns-large-chunk-of-289m-hack/

Transit Swap Exploiter Returns Large Chunk of $28.9M Hack
Security firms help locate the hacker's IP address following the $28.9 million exploit.

In a blog post published on Monday, Transit Swap said that $18.9 million has been returned after a slew of security firms helped triangulate the hacker's IP address.
https://medium.com/@TransitSwap/updates-about-transitfinance-4731c38d6910

zasad@

legendary

Activity: 2016

Merit: 4765

Quote from: Daltonik on September 26, 2022, 09:47:36 AM

The news is not related to DeFi, but it still concerns the vulnerability of addresses to hacking if you have ever used the Profanity address generator, hackers managed to steal ~732 ETH ($950,000) from the Ethereum address created with it using the well-known vulnerability of this generator.

https://twitter.com/PeckShieldAlert/status/1574286302501306368

Hacker steals $950,000 from crypto vanity address as exploits continue
https://www.theblock.co/post/172773/hacker-steals-950000-from-crypto-vanity-address-as-exploits-continue
"Hackers are continuing to steal cryptocurrency through an exploit linked to vanity addresses created by a tool called Profanity.
The latest hack comes after Wintermute lost $160 million as a result of this issue."

Daltonik

legendary

Activity: 2618

Merit: 1505

The news is not related to DeFi, but it still concerns the vulnerability of addresses to hacking if you have ever used the Profanity address generator, hackers managed to steal ~732 ETH ($950,000) from the Ethereum address created with it using the well-known vulnerability of this generator.

https://twitter.com/PeckShieldAlert/status/1574286302501306368

dansus021

copper member

Activity: 2156

Merit: 983

Part of AOBT - English Translator to Indonesia

can i add in the list wintermute hack lost $160m source : https://rekt.news/wintermute-rekt-2/

also this website is reliable telling me about current hack in defi

zasad@

legendary

Activity: 2016

Merit: 4765

https://blog.chainalysis.com/reports/axie-infinity-ronin-bridge-dprk-hack-seizure/
$30 Million Seized: How the Cryptocurrency Community Is Making It Difficult for North Korean Hackers To Profit
"But today I had the privilege of joining the Axie Infinity team on stage at AxieCon to deliver some good news: With the help of law enforcement and leading organizations in the cryptocurrency industry, more than $30 million worth of cryptocurrency stolen by North Korean-linked hackers has been seized. This marks the first time ever that cryptocurrency stolen by a North Korean hacking group has been seized, and we’re confident it won’t be the last.

These are the results thus far of our investigation following the March 2022 theft of more than $600 million from Ronin Network, a sidechain built for the play-to-earn game Axie Infinity."

Daltonik

legendary

Activity: 2618

Merit: 1505

As a result of the hacker attack, the Wintermute marketmaker lost assets worth $160 million, as it is assumed his wallet was created using profanity, the CEO confirmed the hack.

https://twitter.com/SlowMist_Team/status/1572180126707896320
https://twitter.com/EvgenyGaevoy/status/1572134271011225601

zasad@

legendary

Activity: 2016

Merit: 4765

New Free DAO (NFD)- $1.25M
New Free DAO (NFD) Dumps 99% After $1.2M FlashLoan Attack
Another day, another DeFi hack. Decentralised finance (DeFi) protocol New Free DAO has lost $1.25 million in flashloan attacks that caused its native token NFD to crash 99%.
https://medium.com/@CryptoSavingExpert/new-free-dao-nfd-dumps-99-after-1-2m-flashloan-attack-3f54ed604d61

bounceback

sr. member

Activity: 2086

Merit: 283

Vave.com - Crypto Casino

Certik Skynet reports that the smart contact blockchain network Avalanche suffered a recent flash lending attack, according to information from Certik the attackers managed to steal $370k USDC and involve several other DEFI projects.

Resource: https://mobile.twitter.com/CertiKAlert/status/1567314528357990401?s=20&t=H0Sq29gTMSLHgPJHZYaMWw

zasad@

legendary

Activity: 2016

Merit: 4765

Kyber Network hack $265 000
https://twitter.com/kybernetwork/status/1565421305410686976
"1/ ❗️Notice of Exploit of KyberSwap Frontend:

We identified and neutralized an exploit on the KyberSwap frontend. Affected users will be compensated. We have summarized the details in this thread⬇️"

https://getblock.net/en/news/kyber-network-team-recovers-265-000-stolen-in-hack
Kyber Network team recovers $265 000 stolen in hack
According to the platform’s representatives, the attack vector on DEX KyberSwap was successfully identified and removed

zasad@

legendary

Activity: 2016

Merit: 4765

DeFi project OptiFi lost $661,000
https://thetimeshub.in/defi-project-optifi-lost-661000-in-failed-update/34737/
https://decrypt.co/108585/solana-defi-exchange-optifi-bricks-itself-loses-661k

"OptiFi, a Solana-based decentralized exchange, said on Monday that it accidentally shut down its program and that all funds are now inaccessible.
Some $661,000 worth of USDC is now permanently locked within the program. OptiFi said that it will fully refund affected users."

zasad@

legendary

Activity: 2016

Merit: 4765

Celer Network
https://twitter.com/CelerNetwork/status/1560022871564775424
"📢📢📢We are seeing reports that reflects potential DNS hijacking of cbridge frontend. We are investigating at the moment and please do not use the frontend for bridging at the moment."

https://twitter.com/CelerNetwork/status/1560046913436946432
"📢📢📢If you recently used cBridge, please make sure to check and revoke any token approval for the following contracts:
Ethereum: 0x2A2aA50450811Ae589847D670cB913dF763318E8
BSC: 0x5895da888Cbf3656D8f51E5Df9FD26E8E131e7CF
(cont' in next thread)"

____
Ronin $625M
https://cointelegraph.com/news/ronin-hackers-transferred-stolen-funds-from-eth-to-btc-and-used-sanctioned-mixers
Ronin hackers transferred stolen funds from ETH to BTC and used sanctioned mixers
"The hackers continue to spread out the stolen funds using Bitcoin privacy tools as a means to remain anonymous, despite the identity of the hackers believed to be a North Korean cybercrime group."

RussiaUkraineTranslation

jr. member

Activity: 224

Merit: 1

A lot of DeFi DApps get hacked because they have very complicated contracts and this is a new technology. Staking on audited platforms like HEX and MAXX finance are much safer however. HEX has been live for a couple years now without issue and the contracts behind these projects are well proven and safer because they involve staking and not complicated bridges or swaps etc. In fact, it's often more profitable to stake on platforms like MAXX finance or Alchemix than it is to lend or use farms.

Daltonik

legendary

Activity: 2618

Merit: 1505

https://twitter.com/AcalaNetwork/status/1558642849649856512
Acala Network suffered from an exploit that modified the configuration of the Honzon protocol, with which hackers managed to print 1.2 billion AUSD in Acala Network, as a result of which the price of the AUSD stablecoin dropped to $0.05.

https://twitter.com/WatcherGuru/status/1558735108672065538

zasad@

legendary

Activity: 2016

Merit: 4765

https://crypto-academy.org/36-million-back-to-nomad-bridge-recovery-account/
Over $36 Million Back to Nomad Bridge’s Recovery Account
"The wallet, identified by Etherscan as the “official Nomad funds recovery address,” has received ETH 2,179.5 (equal to about $3.9 million), USDC 9.77 million, USDT 5 million, WBTC 196 ($4.7 million), DAI 3.7 million, as well as various sums of other ERC-20 tokens."

https://www.coindesk.com/business/2022/08/09/defi-protocol-curvefinance-hacked-570k-stolen/
DeFi Protocol Curve.Finance Gets Hacked and $570K Is Stolen
The source of the hack has been “found and reverted,” according to the protocol.

zasad@

legendary

Activity: 2016

Merit: 4765

Quote from: Daltonik on August 03, 2022, 12:30:23 PM

Quote from: zasad@ on August 03, 2022, 06:18:53 AM

Issues in the Solana Ecosystem

https://twitter.com/SolanaStatus/status/1554695981781901312
"An exploit allowed a malicious actor to drain funds from a number of wallets on Solana. As of 5am UTC approximately 7,767 wallets have been affected.

The exploit has affected several wallets, including Slope and Phantom. This appears to have affected both mobile and extension."

It seems to me that Solana had constant failures in the mainnet, there is only one question who can be behind the emptying of users' wallets, perhaps the Solana protocol has a number of vulnerabilities that the developers are silent about or do not know about.

https://twitter.com/SolanaStatus/status/1554921396408647680?
"After an investigation by developers, ecosystem teams, and security auditors, it appears affected addresses were at one point created, imported, or used in Slope mobile wallet applications. 1/2"

Read this thread on twitter. Looks like one of the wallets has a problem.

Daltonik

legendary

Activity: 2618

Merit: 1505

Quote from: zasad@ on August 03, 2022, 06:18:53 AM

Issues in the Solana Ecosystem

https://twitter.com/SolanaStatus/status/1554695981781901312
"An exploit allowed a malicious actor to drain funds from a number of wallets on Solana. As of 5am UTC approximately 7,767 wallets have been affected.

The exploit has affected several wallets, including Slope and Phantom. This appears to have affected both mobile and extension."

It seems to me that Solana had constant failures in the mainnet, there is only one question who can be behind the emptying of users' wallets, perhaps the Solana protocol has a number of vulnerabilities that the developers are silent about or do not know about.

Topic: DeFi hacks [history] - page 10. (Read 19555 times)