The hacker of the DeFi project – Uranium Finance – started moving 2,250 ETH, worth approximately $3.35 million, in stolen funds into the popular coin mixer, TornadoCash. The movement of funds from the wallet was detected by the blockchain security firm, PeckShield, on March 7th. Data from Etherscan reveals that the hacker transferred the funds over a time frame of seven hours in transactions ranging from 1 ETH to 100 ETH. In addition to this, another Ethereum wallet tied to...
Read More »Algorand Wallet MyAlgo Warns Users to Withdraw Funds After $9.6M Exploit
Algorand-based wallet provider MyAlgo has cautioned users to withdraw assets from all wallets created with a mnemonic phrase as the company continues investigating an exploit that led to a $10 million loss. The wallet provider tweeted on February 26, warning users that “a targeted attack was carried out against a group of high-profile MyAlgo accounts.” MyAlgo Urges Users to Withdraw Funds MyAlgo further explained that the attacked users had significant amounts of assets in...
Read More »Lendhub Exploiter Moves Proceeds to TornadoCash
Lendhub, a relatively small cross-chain crypto lending platform operating on HECO, was exploited to the tune of $6 million dollars earlier this January. Attack Possible Solely Due to Poor Coding The attack was carried out due to a poorly-executed removal of a deprecated IBSV cToken. Its replacement, which was already active, had an identical price point at the time, which allowed the unknown bad actor to manipulate the pricing and drain around $6 million worth of crypto from...
Read More »Wormhole Bridge Exploit: $140M Worth Stolen Assets Recovered
The Solana-based Wormhole Bridge was hacked for $325 million after the attacker managed to exploit a security flaw, making it one of the largest exploits in crypto history. A year later, a group of white hats, along with two crypto firms, launched a “counter-exploit” against the malicious entities and clawed back a portion of stolen assets tied to the exploit. “Counter Exploit” The counter exploit was jointly conducted by the decentralized finance platform Oasis and Web3...
Read More »Norway Confiscates $6 Million Worth of Crypto Stolen in Axie Infinity Hack
The Norwegian police seized nearly 60 million krone ($5.9 million) in cryptocurrencies. The assets were previously stolen by the notorious North Korean hacking collective – the Lazarus Group – which breached the security of the blockchain-based game Axie Infinity. The Record Seizure Norway’s National Authority for Investigation and Prosecution of Economic and Environmental Crime (Økokrim) confiscated almost $6 million worth of digital currencies, a record-high crypto seizure...
Read More »Mango Markets Exploiter Avraham Eisenberg Wants to Keep $47M as Bounty
Avraham Eisenberg, the 27-year-old Puerto Rico man who made over $100 million by exploiting the decentralized finance (DeFi) protocol Mango Markets in October 2022, is seeking to keep part of the funds as a bug bounty. In a court document filed at the US District Court for the Southern District of New York on Wednesday, Eisenberg’s lawyers claimed the exploiter had already returned enough of the funds, referring to the $67 million he gave back to the protocol after the...
Read More »Another $1.4M in Funds Stolen by Lazarus Group Frozen by Binance, Huobi
It’s been over half a year since the Harmony bridge was breached, allowing hackers believed to be a part of the Lazarus Group to make off with about $100 million in cryptocurrencies at the time they were stolen. Multiple Cashout Attempts Nearly $91 million of those funds have seen attempted cashouts so far. The most recent attempt at laundering the stolen funds saw about $27 million worth of crypto being moved. The operation was detected by security researchers, although it...
Read More »Solana’s Wormhole Exploiter Moves Another $61M in ETH
The hacker who exploited Solana’s cross-chain bridge Wormhole a year ago has moved another $61 million in ether (ETH) of the stolen funds. Blockchain security firm PeckShield disclosed Sunday that the exploiter moved some of the assets to the Ethereum-based decentralized protocol MakerDAO. Wormhole Attacker Moves Stolen Funds Again Recall that Wormhole Bridge was exploited in February 2022 after a vulnerability on the platform enabled an attacker to mint wrapped ETH (wETH)...
Read More »DeFi Protocol dForce Loses $3.6M in Reentrancy Attack
Decentralized finance (DeFi) protocol dForce has suffered a reentrancy vulnerability attack leading to the loss of $3.6 million worth of crypto assets. The attacker targeted the protocol’s vault on the automated market maker (AMM) platform Curve Finance, which operates on the Arbitrum and Optimism blockchains. dForce Exploited for $3.65M The hack was first flagged by Twitter user @ZoomerAnon who announced that dForce had lost about $1.7 million in a series of flash loan...
Read More »Trust Wallet Clears the Air on Mysterious $4 Million User Hack
Trust Wallet – a multi-chain crypto wallet provider – provided a statement on Wednesday explaining recent events allowing for $4 million to be stolen from one of its users. The company chalked the theft’s cause up to a social engineering attack by an organized crime unit in Rome, rather than a flaw in its software. On Monday, rumors began to circulate about a Trust Wallet user who lost $4 million in funds to a scammer who had merely taken a picture of the user’s balance. No...
Read More »