Famous NFT influencer NFT God suffered a hacking scheme.
https://chainwitcher.com/nft-god-hacked/
Last night my entire digital livelihood was violated.
Every account connected to me both personally and professionally was hacked and used to hurt others.
Less importantly, I lost a life changing amount of my net worth
https://twitter.com/NFT_GOD/status/1614442000958324739
What conceit do you need to have to call yourself God?
Topic: DeFi hacks [history] - page 8. (Read 19555 times)
SlowMist 2022 Security Report: Hacking incidents caused losses of $3.777b, a decrease of about 61% compared to $9.795b in 2021. In 2022, there were 10 security incidents with a loss of hundreds of millions, cross-chain bridges accounted for 4 of them.
https://twitter.com/WuBlockchain/status/1612448354591727616?
https://twitter.com/WuBlockchain/status/1612448354591727616?
Nikhil Gopalani- COO / Ops & BD - Nike / RTFKT
https://www.crunchbase.com/person/nikhil-gopalani
Nikhil Gopalani(C)
https://twitter.com/Nikgopalani/status/1610120899570663425
"Hey Clone X community - I was hacked by a clever Phisher (same phone # as apple ID) & sold all my clone x / some other nfts... Obviously pretty upset and hurt by this and I havent really been able to move all day. Hope people who bought my clones love them (being positive)"
https://twitter.com/ImmuneBytes/status/1610683109904912384
"RTFKT COO @Nikgopalani
became the victim of a #phishing attack. On Jan 2, he allegedly lost $173,000 worth of #NFTs to the exploit.
The list of stolen NFTs includes 19 CloneX NFTs, 18 RTKFT Space Pods, 17 Loot Pods, 11 CryptoKicks, 19 RTFKT Animus Eggs, and more. Source:
@opensea"
https://www.crunchbase.com/person/nikhil-gopalani
Nikhil Gopalani(C)
https://twitter.com/Nikgopalani/status/1610120899570663425
"Hey Clone X community - I was hacked by a clever Phisher (same phone # as apple ID) & sold all my clone x / some other nfts... Obviously pretty upset and hurt by this and I havent really been able to move all day. Hope people who bought my clones love them (being positive)"
https://twitter.com/ImmuneBytes/status/1610683109904912384
"RTFKT COO @Nikgopalani
became the victim of a #phishing attack. On Jan 2, he allegedly lost $173,000 worth of #NFTs to the exploit.
The list of stolen NFTs includes 19 CloneX NFTs, 18 RTKFT Space Pods, 17 Loot Pods, 11 CryptoKicks, 19 RTFKT Animus Eggs, and more. Source:
@opensea"
Hackers have been able to steal NFTs like magic with a little-known OpenSea feature. It's the newest hack, and multiple millions in Apes have been lost to it already.
https://twitter.com/harpieio/status/1606034727491624961?
The OpenSea contract allows for "gasless sales," where users can sell NFTs by signing an unreadable message like the one above.
Here's the catch: you can also set up ⚠️private auctions with custom prices⚠️ with these unreadable signatures.
https://twitter.com/harpieio/status/1606034729102217216
https://twitter.com/harpieio/status/1606034727491624961?
The OpenSea contract allows for "gasless sales," where users can sell NFTs by signing an unreadable message like the one above.
Here's the catch: you can also set up ⚠️private auctions with custom prices⚠️ with these unreadable signatures.
https://twitter.com/harpieio/status/1606034729102217216
Rubic DEX aggregator hack leads to $1.4m of user funds stolen
https://crypto.news/rubic-dex-aggregator-hack-leads-to-1-4m-of-user-funds-stolen/
Cross-chain decentralized finance (DeFi) protocol Rubic was compromised, resulting in funds stored in its user’s addresses being siphoned out and transferred to the hackers.
Defrost Finance hack & Returned $12M
https://www.coindesk.com/business/2022/12/26/defrost-finance-says-hacked-funds-have-been-returned/
Defrost Finance Says Hacked Funds Have Been Returned
The hack, which some observers had characterized as a rug pull, was estimated to have netted $12 million.
___
https://crypto.news/rubic-dex-aggregator-hack-leads-to-1-4m-of-user-funds-stolen/
Cross-chain decentralized finance (DeFi) protocol Rubic was compromised, resulting in funds stored in its user’s addresses being siphoned out and transferred to the hackers.
Defrost Finance hack & Returned $12M
https://www.coindesk.com/business/2022/12/26/defrost-finance-says-hacked-funds-have-been-returned/
Defrost Finance Says Hacked Funds Have Been Returned
The hack, which some observers had characterized as a rug pull, was estimated to have netted $12 million.
___
Update: Mango exploiter (Avraham Eisenberg) arrested https://www.coindesk.com/policy/2022/12/27/mango-markets-exploiter-eisenberg-arrested-in-puerto-rico/
add to OP
https://www.bloomberg.com/news/articles/2022-10-12/crypto-platform-mango-hit-by-latest-hack-in-digital-asset-sector#
Crypto Attack Swipes $100 Million From DeFi Service Mango
"Incident comes just days after $100 million Binance Coin hack
Mango says attackers indicated a willingness to communicate
An attacker spirited away about $100 million from decentralized finance provider Mango by manipulating the price of its token in an exploit that wiped out depositors on the crypto platform.
The heist began with two accounts funded with the stablecoin USD Coin, the platform said Wednesday on Twitter. The accounts took large positions in Mango perpetual futures, causing the price of the Mango token to spike."
Crypto Attack Swipes $100 Million From DeFi Service Mango
"Incident comes just days after $100 million Binance Coin hack
Mango says attackers indicated a willingness to communicate
An attacker spirited away about $100 million from decentralized finance provider Mango by manipulating the price of its token in an exploit that wiped out depositors on the crypto platform.
The heist began with two accounts funded with the stablecoin USD Coin, the platform said Wednesday on Twitter. The accounts took large positions in Mango perpetual futures, causing the price of the Mango token to spike."
Update: Mango exploiter (Avraham Eisenberg) arrested https://www.coindesk.com/policy/2022/12/27/mango-markets-exploiter-eisenberg-arrested-in-puerto-rico/
That's like modern day bank robbery but more effective and profitable. And while whose seem a lot, i think that centralized exchange hacks combined with exit scams are far worse.
As in comparison bitfinex lost $623 million in one hack, coincheck $560 million, and FTX just got hacked for $600 million. And if we start to count exit scams, remember that plustoken team got $2.9 Billion and ran. Not to mention all the leaked user data with all the cexes.
As in comparison bitfinex lost $623 million in one hack, coincheck $560 million, and FTX just got hacked for $600 million. And if we start to count exit scams, remember that plustoken team got $2.9 Billion and ran. Not to mention all the leaked user data with all the cexes.
Top Five DeFi Crime Trends of 2022
Decentralized finance (DeFi) has had a challenging year – losing 75% of its total value locked over the last 11 months. However, while the crypto crash might have hit investors, it did not deter criminals. Bug exploits, logic faults, private key compromises and social engineering attacks broke records in 2022, stealing a record $2.7 billion from DeFi protocols. That is more than half of the $5.1 billion stolen overall from DeFi since 2020. Furthermore, four of 2022’s worst DeFi hacks secured their place on the list of top ten biggest crypto heists of all time.
https://hub.elliptic.co/analysis/top-five-defi-crime-trends-of-2022/
Decentralized finance (DeFi) has had a challenging year – losing 75% of its total value locked over the last 11 months. However, while the crypto crash might have hit investors, it did not deter criminals. Bug exploits, logic faults, private key compromises and social engineering attacks broke records in 2022, stealing a record $2.7 billion from DeFi protocols. That is more than half of the $5.1 billion stolen overall from DeFi since 2020. Furthermore, four of 2022’s worst DeFi hacks secured their place on the list of top ten biggest crypto heists of all time.
https://hub.elliptic.co/analysis/top-five-defi-crime-trends-of-2022/
Bitkeep has been the next hack, according to hacking sources Bitkeep involved 4 chains of ETH, BSC, POLYGON and TRX, and now $31m has come out as its transaction volume.
It is likely that their losses will increase given that there is currently no response from BitKeep.
Source from OKlink: https://twitter.com/OKLink/status/1607356529929506817
It is likely that their losses will increase given that there is currently no response from BitKeep.
Source from OKlink: https://twitter.com/OKLink/status/1607356529929506817
Hackers managed to re-attack the Rubic cross-chain swap aggregator project, they compromised one of the smart contracts, the damage amounted to ~$1.41 million. The Rubic team reported that 49 users were affected, and promised to compensate for their losses.
https://twitter.com/peckshield/status/1606937055761952770
https://twitter.com/CryptoRubic/status/1607076270663208960
https://twitter.com/peckshield/status/1606937055761952770
https://twitter.com/CryptoRubic/status/1607076270663208960
What a long list. DeFi hacks and exploits will continue. We have so many dubious actors right on the space, one can not be more than careful enough.
I think Insurance coverage might make a big difference against hacks. What do you think?
I think Insurance coverage might make a big difference against hacks. What do you think?
https://markets.businessinsider.com/news/currencies/global-drug-cartel-binance-launder-millions-crypto-exchange-dea-investigation-2022-12
"This is actually an example of where the transparency of blockchain transactions works against criminal actors," Matthew Price, the senior director of investigations at Binance, told Forbes. "The bad guys are leaving a permanent record of what they're doing."
I also write a lot about refunds. Every year it will become more and more difficult to hide the stolen funds.
What a long list. DeFi hacks and exploits will continue. We have so many dubious actors right on the space, one can not be more than careful enough.
I think Insurance coverage might make a big difference against hacks. What do you think?
I think Insurance coverage might make a big difference against hacks. What do you think?
The 2022 Rug Pull Report
https://www.soliduslabs.com/reports/rug-pull-report
https://www.coingecko.com/research/publications/how-many-cryptocurrencies-faile
"3,322 cryptocurrencies that were listed on CoinGecko in 2021, have failed (categorised as a dead coin).
The last bull market run that started in November 2020 saw a spike in cryptocurrencies listed, with more than 8000 cryptocurrencies listed in 2021. As of today, nearly 40% have been deactivated and delisted from CoinGecko."
https://www.soliduslabs.com/reports/rug-pull-report
https://www.coingecko.com/research/publications/how-many-cryptocurrencies-faile
"3,322 cryptocurrencies that were listed on CoinGecko in 2021, have failed (categorised as a dead coin).
The last bull market run that started in November 2020 saw a spike in cryptocurrencies listed, with more than 8000 cryptocurrencies listed in 2021. As of today, nearly 40% have been deactivated and delisted from CoinGecko."
Solana DeFi Exchange Raydium Hacked for Over $2 Million
The attacker appears to have used the protocol’s own private keys to drain liquidity pools. It’s unclear how they got them.
https://decrypt.co/117455/solana-raydium-hacked-2-million
The wallet draining LP Pools from Raydium liquidity pools has received over $2.2M now, including $1.6M $SOL
https://twitter.com/nansenportfolio/status/1603762024667746305?
The attacker appears to have used the protocol’s own private keys to drain liquidity pools. It’s unclear how they got them.
https://decrypt.co/117455/solana-raydium-hacked-2-million
The wallet draining LP Pools from Raydium liquidity pools has received over $2.2M now, including $1.6M $SOL
https://twitter.com/nansenportfolio/status/1603762024667746305?
The hacks seem to involve using buggy smart contracts or protocols. It is really a shame and harmful for the early reputation DeFi of as a whole. Maybe it is better to find DeFi projects to investment with that don't even use smart contracts or any protocols at all?
And all hacker funds are laundered in mixers, it's a shame.
I hope, all hackers will be caught, funds seized and hackers put into prison!
"There were a total of 12,320 requests during the reporting period, a ~66% increase over last year’s report.I hope, all hackers will be caught, funds seized and hackers put into prison!
And all hacker funds are laundered in mixers, it's a shame.
I hope, all hackers will be caught, funds seized and hackers put into prison!
Just like in a children's fairy tale: good will triumph over evil!I hope, all hackers will be caught, funds seized and hackers put into prison!
______
https://www.coinbase.com/blog/transparency-report-2022
Key Takeaways:
"There were a total of 12,320 requests during the reporting period, a ~66% increase over last year’s report.
The ~57% of requests from outside of the United States was a ~6% increase over our previous report. In addition, 21 Countries sent requests for the first time in 2022, including 11 that sent more than one: Andorra (2), Argentina (2), Brazil (5), Bulgaria (3), China (12), Croatia (3), Czech Republic (104), Liechtenstein (4), Serbia (5), Slovakia (6), Taiwan (6).
~80% of law enforcement requests were from the U.S., U.K., Germany, and Spain."
Wow, what a long list!
DeFi is known to be coded badly but I wouldn't expect such a long list...
Devs really need to set up a better code, review it better and do more education on how to code properly.
We can't afford much more DeFi hacks, DeFi is already known to be famous for hacks.
And all hacker funds are laundered in mixers, it's a shame.
I hope, all hackers will be caught, funds seized and hackers put into prison!
DeFi is known to be coded badly but I wouldn't expect such a long list...
Devs really need to set up a better code, review it better and do more education on how to code properly.
We can't afford much more DeFi hacks, DeFi is already known to be famous for hacks.
And all hacker funds are laundered in mixers, it's a shame.
I hope, all hackers will be caught, funds seized and hackers put into prison!
7 000 000$ lodestar finance
https://twitter.com/LodestarFinance/status/1601687317604839424
https://tokeninsight.com/en/news/arbitrum-ecosystem-defi-protocol-lodestar-finance-exploited
"Arbitrum ecosystem DeFi protocol Lodestar Finance tweeted that it was exploited and deposits have been drained. The protocol has set all interest rates to 0.
An attacker manipulated the exchange rate of the plvGLP contract to 1.83 GLP per plvGLP. They supplied plvGLP collateral to lodestar and borrowed all available liquidity. After the hack several plvGLP holders also took advantage of the opportunity and also cashed out at 1.83 glp per plvGLP. The hacker burned a little over 3 million in GLP, their profit on this exploit was the stolen funds on Lodestar - minus the GLP they burned.
Lodestar Finance said that 2.8 million of the GLP (about $2.4 million) was recoverable. The team is going to reach out to the hacker and see if they can negotiate a bug bounty to recover more funds."
https://twitter.com/LodestarFinance/status/1601687317604839424
https://tokeninsight.com/en/news/arbitrum-ecosystem-defi-protocol-lodestar-finance-exploited
"Arbitrum ecosystem DeFi protocol Lodestar Finance tweeted that it was exploited and deposits have been drained. The protocol has set all interest rates to 0.
An attacker manipulated the exchange rate of the plvGLP contract to 1.83 GLP per plvGLP. They supplied plvGLP collateral to lodestar and borrowed all available liquidity. After the hack several plvGLP holders also took advantage of the opportunity and also cashed out at 1.83 glp per plvGLP. The hacker burned a little over 3 million in GLP, their profit on this exploit was the stolen funds on Lodestar - minus the GLP they burned.
Lodestar Finance said that 2.8 million of the GLP (about $2.4 million) was recoverable. The team is going to reach out to the hacker and see if they can negotiate a bug bounty to recover more funds."
The Ankr DeFi protocol was hacked, as a result, a huge number of aBNBc tokens were issued by the attackers, after which its price fell to zero, losses are estimated at about $15 million.
https://twitter.com/PeckShieldAlert/status/1598527823224111104
https://twitter.com/ankr/status/1598503332477280256
The project team confirms the hack and declares that the users' funds are safe, and will be reimbursed by the reissue of aBNBc based on a snapshot of users' wallets.
https://twitter.com/ankr/status/1598570449390260226
https://twitter.com/PeckShieldAlert/status/1598527823224111104
https://twitter.com/ankr/status/1598503332477280256
The project team confirms the hack and declares that the users' funds are safe, and will be reimbursed by the reissue of aBNBc based on a snapshot of users' wallets.
https://twitter.com/ankr/status/1598570449390260226
https://cointelegraph.com/news/ankr-confirms-exploit-asks-for-immediate-trading-halt
"BNB Chain-based decentralized finance (DeFi) protocol Ankr has confirmed it has been hit by a multi-million dollar exploit on Dec. 1.
The attack appeared to be first discovered by on-chain security analyst PeckShield at approximately 12:35 am UTC on Dec. 2. "
Jump to: