Decentralized finance (DeFi) protocol Linear Finance has fallen victim to an attack that resulted in the complete depletion of liquidity in its Linear USD (LUSD) token. Following the incident, Linear Finance’s team apologized to the community and implemented various safety measures. LUSD Price Collapses to Zero On Sept. 21, Linear Finance announced it had experienced a security breach, leading to the complete drainage of all LUSD liquidity on the PancakeSwap and Ascendex...
Read More »Retool Attributes Breach That Affected Crypto Users with Google’s Authenticator
Retool, a prominent software development company, has recently revealed that 27 of its cloud customers fell prey to a targeted SMS-based phishing attack. The breach has raised concerns about the security of cloud synchronization features, particularly Google Authenticator’s cloud sync. Retool Falls Prey to Targeted SMS Phishing Attack The Aug. 27 attack began with a deceptive SMS phishing campaign directed at Retool’s employees. The malicious individuals pretended to be IT...
Read More »CoinEx Invites Hackers to Negotiate, Promises Bug Bounty Reward
Cryptocurrency exchange CoinEx, which recently suffered a breach, has called on the hacker to negotiate with the company while also promising a generous bounty reward if they decided to return the stolen assets. The notorious North Korean-sponsored Lazarus Group was identified as the hackers behind the attack on CoinEx. Let’s Dialogue, Says CoinEx to its Hackers In an open letter on Sept. 15, CoinEx stated that the hack incident served as a lesson for the company and made the...
Read More »North Korean Hackers Turning to Russian Exchanges to Launder Stolen Crypto: Chainalysis
According to a Sept. 14 report from on-chain analytics provider Chainalysis, the total amount of cryptocurrency stolen is estimated at $3.54 billion. North Korea “continues to be an incubator for hacking activities and remains one of the largest active threats in the cybercrime landscape,” it stated. Moreover, the Democratic People’s Republic of Korea (DPRK)-linked hacking groups are “increasing their use of Russia-based exchanges known to launder illicit crypto assets.” 🧵...
Read More »Lazarus Group Strikes Again: Transactions Reveal On-Chain Connections in 5 Major Exploits
CertiK has revealed transactions connecting the breaches at Atomic Wallet, Alphapo, CoinsPaid, Stake.com, and CoinEx that show Lazarus Group’s involvement in these exploits. This comes while the digital community is reeling from various cyber attacks that have affected several major Web3 entities. On-Chain Connections The infamous Lazarus Group, supported by North Korea, is still causing chaos in the Web3 community. Following their well-known exploit of the Ronin bridge in...
Read More »North Korea-Affiliated Lazarus Group Behind CoinEx Hack: Report
North Korea’s notorious state-backed Lazarus Group is speculated to be behind the $55 million hack of crypto exchange CoinEx. According to prominent on-chain sleuth ZachXBT’s latest update, the attackers “accidentally” connected their address to the $41 million hack of the betting platform Stake.com. Just a day after the exploit, the investigator flagged an Ethereum wallet address that was likely owned by the attackers of both CoinEx and Stake.com, implying that the same...
Read More »Crypto Exchange CoinEx Hacked For $29 Million
Global cryptocurrency exchange CoinEx has been hacked for at least $29 million, with blockchain sleuths identifying a series of suspicious transactions leaving the firm’s hot wallets. Crypto security platform Cyvers reported the breach on Tuesday, calling on CoinEx to halt all deposits and withdrawals immediately. The hack occurred across three different blockchains, involving a wide variety of tokens. In total, thieves stole $18.12 million in assets on Ethereum, $8.5 million...
Read More »Vitalik Buterin’s X (Twitter) Account Compromised, Iconic NFT Reportedly Stolen
Vitalik Buterin, the co-founder of the second-largest blockchain, Ethereum, had his X account hacked to portray a phishing site that reportedly drained over $800,000. The fraudulent post has been deleted since, and the account has been restored. The blockchain security resource PeckShield was among the first to alert about the ongoing hack later last night, showcasing the suspicious post coming from Buterin’s account. It read that Consensys has decided to distribute...
Read More »FBI Links $41 Million Stake Hack to North Korea’s Lazarus Group
The US Federal Bureau of Investigations (FBI) claimed that the notorious North Korea-sponsored hacking syndicate Lazarus Group is responsible for the recent attack on the cryptocurrency sports betting and casino platform Stake. The hack resulted in the loss of over $41 million worth of crypto assets from the gambling firm. Lazarus Group Behind Stake Hack In a press release issued on Sept. 6, 2023, the FBI said it carried out investigations into the Stake hack, which revealed...
Read More »CertiK Names the Reason for DNS Hijacking on DeFi
Millions of digital assets have been stolen by cyber adversaries via DNS hijacking attacks for phishing purposes, targeting users’ wallet seed phrases, or creating deceptive webpages that closely resemble legitimate sites. Attacks on Domain Name Systems (DNSs) play a crucial role in the internet’s infrastructure, providing insights into security incidents in Web 2 that have directly affected the Web3 industry. However, transitioning to decentralized frontends has emerged as a...
Read More »