Tag Archives: hacks

Hackers briefly took over the official X accounts of major crypto data aggregator Coingecko to promote a fake token launch and airdrop. The Coingecko incident became the second X hack within 24 hours after the U.S. Securities and Exchange Commission’s account was also compromised.  Coingecko announced the news of the hack in an X post on Jan. 10, warning users not to click or engage any suspicious links. The platform further said it would carry out investigations and secure...

As phishing scammers continue to evolve and employ more sophisticated tactics to evade security measures, a relatively new form of malware associated with crypto has experienced considerable “success” in the past year. Dubbed, “Wallet Drainers,” Scam Sniffer’s discoveries regarding this new malware demand the complete attention of the industry. Crypto Malware Wars: 2023 According to a recent report by Scam Sniffer, these malicious programs are deployed on phishing websites to...

Prominent blockchain security firm CertiK’s X account (previously Twitter) was hacked on January 5th. The compromised account, with a follower count of 342,900, stole crypto from users’ wallets through carefully disguised phishing links. One of the links posted falsely asserted that a vulnerability had been identified in Uniswap’s router contract. The misleading tweet urged users to visit a fake RevokeCash page, claiming it would enable them to reverse any vulnerable...

Gamma Strategies – a DeFi protocol built on the Ethereum blockchain – fell victim to an exploit, resulting in a loss of approximately $3.4 million. In response to the attack, the protocol swiftly implemented measures to prevent further losses, temporarily disabling deposits to all public DeFi vaults while keeping withdrawals active for users in need of accessing their funds. The exploit was initially identified by blockchain investigator PeckShield on January 4, which was...

Catalyx, a crypto trading platform based in Canada, suffered a security breach that resulted in the loss of customer funds in its custody. While the exact value of the loss is not mentioned, the platform has halted crypto and fiat withdrawals amid ongoing investigations. Catalyx Suspends Trading and Withdrawals CatalX CTS, the operator of Catalyx, announced the incident in a press release, stating that the breach likely involved an employee. The company investigating the...

As the holiday season arrives, exploiters seem to be unusually active, and this time, Thunder Terminal fell victim to their efforts, losing $240,000. While the team behind the on-chain trading platform said no private keys or wallets were compromised, the hacker disputes this assertion, insisting on an additional ransom for user data. Holiday Havoc In the incident report, Thunder emphasized that the breach resulted in losses of 86.5 Ether and 439 Solana, equivalent to...

On the 30th of July, four Curve Finance pools were exploited due to a re-entrancy bug made possible by the Vyper programming language. The hackers attacked four mining pools and made off with a total of $73.5 million. Almost immediately, the community sprang into action – Curve itself extended the standard olive branch, offering to treat the incident as a white hat incident in return for 90% of the stolen funds being sent back. Meanwhile, genuine white hats also went after...

Wallet drainers are a type of scam that generally operates by cloning a legitimate website, fooling the target into providing their crypto wallet credentials, and then executing a smart contract that sends the users’ funds to bad actors. 🚨1/ Alert: A ‘Wallet Drainer’ has been linked to phishing campaigns on Google search and X ads, draining approximately $58M from over 63K victims in 9 months. pic.twitter.com/ye3ob2uTtz — Scam Sniffer | Web3 Anti-Scam (@realScamSniffer)...

A TRM Labs research has revealed that the cryptocurrency industry witnessed a downturn in hack volumes in 2023, with a more than 50% reduction compared to the previous year. Despite a consistent number of attacks, around 160, the total value stolen dropped dramatically to $1.7 billion, less than the nearly $4 billion lost in 2022. A Closer Look at the Figures Since the inception of cryptocurrency in 2009, hackers have stolen billions of dollars in digital assets annually. In...

A former senior security engineer, Shakeeb Ahmed, pled guilty to the hacking incident on the decentralized finance yield protocol, Nirvana Finance, along with another unnamed decentralized exchange (DEX). Ahmed will also forfeit over $12.3 million in stolen assets, with the United States Attorney’s Office of the Southern District of New York (SDNY) describing the case as the “first-ever conviction for the hack of a smart contract.” Two DEX Attacks in One Month In a press...