Topic: DeFi hacks [history] - page 15. (Read 19377 times)

The Vee.Finance landing platform was attacked by an unknown hacker, as a result, the attacker withdrew 8804.7 ETH and 213.93 BTC worth approximately $35 million. https://veefi.medium.com/vee-finance-accident-announcement-5e75ff197da6



All services were suspended. We are investigating the cause, please follow our official accounts for the latest updates reported on the project's twitter.

There is only one defect among them that hurt me, the defi was pancakebunny. I was getting my Yield revenues with bunny, after the hack, the price went down and it hurt me. Defi, I knew that there were too many hacks, there are projects in this list that I have not heard before, a good list has been prepared.

after this incident, there will be all kinds of security instruments that are carried out, there will even be a mission to report bugs, we will give gifts(reward). as far as made same OP from 2020-2021, it is not impossible before that year will also happen.

pNetwork Protocol -$12M
https://decrypt.co/81301/defi-bridging-protocol-pnetwork-suffers-12-million-hack
DeFi Bridging Protocol pNetwork Suffers $12 Million Hack
An unknown hacker has exploited a bug in pNetwork’s codebase to steal 277 Bitcoin from the protocol's bridge on Binance Smart Chain.

Uniswap when BZRX launched their IDO but when reading the article the author explained how the guy earned 500k usd but not by hacking but combining defi trading bot. It is very important to give real information people. People think that decentralized finance doesn't have any risks! But it's quite the opposite. It is a new industry, new code, no one has tested for long so be careful. Thank you very much for sharing the important information needed.

pNetwork - a cross-chain DeFi platform was attacked on Binance Smart Chain, losing 277 bitcoin (over USD 12 million).


Right after the attack, pNetwork offered a clean bounty of USD 1.5 million if the hacker returned the funds.

https://twitter.com/josephdelong/status/1438839165873967107
"100 ETH has been returned to the Sushi multisig. Hoping the attacker sends the rest
https://etherscan.io/tx/0x4bfd68aaaaad03d0dd2d5b9e862e3bc4c7ee90cb85507eb85262e932c8748521"

https://twitter.com/AppletonDave/status/1438854505332764672
https://etherscan.io/tx/0x904e5bcb5ef9cfb19f19afd04849f3b12d17dc347d3e525072fcd139cc08cbdb

https://twitter.com/josephdelong/status/1438861783599652868
"All funds returned"

https://twitter.com/skymoon_gt/status/1438847456377192450
"I think the biggest hackers are the ones taking positions of short in exchanges right at the moment of the incident or right before. Once all funds are returned, check these individuals/groups as well. Probably they make more money that way!"


https://decrypt.co/81120/sushiswaps-token-launchpad-hacked-over-3m-ethereum
SushiSwap’s Token Launchpad Hacked for Over $3M in Ethereum

The hacker withdrew 864.8 ETH something more than $3 million from the NFT auction)on the MISO IDO platform of the SushiSwap protocol by introducing malicious code into the external interface of MISO and spoofing the auction address. Chief technical officer SushiSwap Joseph Delong reports on Twitter. Hacker's transaction ID: https://etherscan.io/address/0x3ddd8b6d092df917473680d6c41f80f708c45395#internaltx

AFKSystems   12M $
https://twitter.com/RugDocIO/status/1436440660517793798?s=20
"AFKSystems rug update: stolen funds were eventually sent to"
https://etherscan.io/address/0x56eb4a5f64fa21e13548b95109f42fa08a644628

https://twitter.com/ObeliskOrg/status/1436493898180931588?s=20
:1/18 AFK System Hard Rug Postmortem thread :"

---

Zabu Finance $3.2M

https://slowmist.medium.com/?p=44243919ea29
"Brief analysis of Zabu Finance being hacked
According to the intelligence of the SlowMist Zone, on September 12, 2021, the Zabu Finance project on Avalanche suffered flashloan attack."

https://twitter.com/zabufinance/status/1436844923483869184

[moderator's note: consecutive posts merged]

As reported on twitter PeckShield Inc. the hacker behind the attack on Cream Finance returned the funds stolen as a result of the recent attack in the amount of 5152.6 ETH.

So far, the most unfortunate incidents seem to be Rune and Poly, although after Poly, Tether confirmed the refund but defi seems to have been taught a lesson in security to improve  than.  And I suspect cross-chain bridges are a research point for hackers.

What is wrong with the contract? there must be a solution to avoid such lost. Moreover, it has happened for many times before. I guess they just want to collect investors money without having any responsibility to protect and reserve the funds. Such a disaster. 

DAO Maker -4M
https://twitter.com/TheDaoMaker/status/1433994186446020609

This is the second hack in a month.

https://etherscan.io/address/0x2708cace7b42302af26f1ab896111d87faeff92f#tokentxns

A phishing attack on the issue of tokens of the NFT-project Aurory Project on the Solana blockchain allowed the attacker to withdraw from the wallets of the victims of cryptocurrency and NFT, according to various estimates, from $500,000 to $1.1 million. https://cryptonews.net/en/1635083/

How convenient to hack platforms for fun, they must not have noticed this is a question of public funds safely and the integrity and trustworthiness of the project in question, it is better they look for other ways of having fun than to mess around with people's investment, I don't see what's funny here especially when the reverse is the case.

Cream Finance-19M
Cream Finance DeFi platform loses $19M in a flash loan hack
https://cointelegraph.com/news/cream-finance-defi-platform-loses-19m-in-a-flash-loan-hack

https://twitter.com/CreamdotFinance/status/1432249771750686721?
"PeckShield specified that the hacker exploited the Amp token by reborrowing assets during its transfer before updating the first to borrow in 17 separate transactions. Providing an example transaction, the security firm stated, “The hacker makes a flashloan of 500 ETH and deposit the funds as collateral. Then the hacker borrows 19M $AMP and makes use of the reentrancy bug to re-borrow 355 ETH inside $AMP token transfer. Then the hacker self-liquidates the borrow.”"


xToken- 4,5M
"On 29 August at 04:43 UTC, a vulnerability in our xSNX contract was exploited. We estimate the loss to holders at $4.5 million. We are incredibly disappointed in ourselves and deeply sorry to our community."
https://medium.com/xtoken/xsnx-post-mortem-666d35071f38

---

https://twitter.com/CreamdotFinance/status/1432909465104240641
"At approximately 12pm on 31st August (UTC +8), C.R.E.A.M. Finance was exploited for 462,079,976 in AMP tokens and 2,804.96 ETH tokens.

Stolen tokens will be replaced. We will commit to allocating 20% of all protocol fees toward repayment until this debt is fully paid."

C.R.E.A.M. Finance Post Mortem: AMP Exploit
https://medium.com/cream-finance/c-r-e-a-m-finance-post-mortem-amp-exploit-6ceb20a630c5

[moderator's note: consecutive posts merged]

The hacker managed to withdraw almost $25 million during the latest flash credit exploit of the Cream Finance protocol using the error of re-entering the AMP token contract. https://cointelegraph.com/news/cream-finance-defi-platform-loses-19m-in-a-flash-loan-hack

Maze Protocol -  4 million US dollars

"The BSC project Maze Protocol was attacked by hackers, and more than 4 million US dollars were suspected to be stolen. Certik also audited and issued a report."

https://twitter.com/WuBlockchain/status/1425970290660544515

"Maze Protocol：The hacker exploited a leak that allowed borrowing assets based on users’ collateral and sending funds directly to the attacker’s address.
The asset pools have been frozen to prevent more attacks. The remaining funds are safe. The website is temporarily shut down."
https://twitter.com/WuBlockchain/status/1425970973900083204

---

https://medium.com/daomaker/dao-maker-compensation-plan-b7a76a312c30
DAO Maker Compensation Plan

"
Phase 1: The SHO Must Go On
500 USDC will be airdropped to all affected users’ wallets without delay.

Phase 2: Remaining 65% Refund & Liquid IOU Tokens
Given that the net exploited amount was $7M, the amount due (after the $2.5M deposit to users’ escrow) equals $4.5M. This $4.5M will be provided to users in exactly one year’s time in the form of DAO tokens at the future market price.
"

---

https://decrypt.co/78802/ethereum-dex-avoids-350m-defi-hack-thanks-white-hat-heroics
Ethereum DEX Avoids $350M DeFi Hack Thanks to White Hat Heroics: Report

"In brief
SushiSwap’s MISO token sale platform had an exploit that could have been used to steal $350 million worth of Ethereum.
A crypto researcher from VC firm Paradigm says he discovered the exploit yesterday and worked with SushiSwap to neutralize the threat."

---

https://decrypt.co/79307/polynetwork-make-affected-users-whole-resume-functionality

PolyNetwork to Make Affected Users Whole, Resume Functionality
"Following the record-breaking hack, the crypto project platform is now returning lost funds to affected users."

https://twitter.com/PolyNetwork2/status/1429738587046563841

"Today’s announcement from PolyNetwork appears to close the chapter on the historic heist. Least until the next hack."

[moderator's note: consecutive posts merged]

The issue of defi hack is becoming one too many,  people are likely going to desist from participating in defi investment.  But another angle to all these issues is the lessons that must be learned through all these events.  I expect the defi space to be stronger and better as we experiment this laudable idea of decentralized finance!

I guess they are already rich or they are not really criminals because they cannot pull out this kind of deed, it saves the market from dipping, this kind of news is what makes the market dip and what makes the market grow, I hope criminals will learn from this one, that the whole community will go after them and make them pay if they continue these activities.