Posts

Showing posts with the label hack

Cetus And Sui Face Centralization Backlash After Validators Freeze Portion Of Stolen Funds In $223M Hack

Image
Cetus and the Sui Foundation are facing criticism after validators froze a large portion of the $223 million that was stolen during the Cetus hack on May 22, raising centralization concerns. Cetus and the Sui Foundation announced that validators had frozen a majority of the stolen assets. According to the Cetus team, $163 million of the $223 million was frozen by validators and ecosystem partners on the same day as the incident. However, the move to freeze the funds was criticized, with several Web3 community members saying it “undermines the principles of decentralization.” “Sui validators are actively censoring transactions across the blockchain,” wrote one user on X, echoing similar posts by community members. SUI validators are actively censoring transactions across the blockchain. This completely undermines the principles of decentralization and transforms the network into nothing more than a centralized, permissioned database. — Dave (@ItsDave_A...

RWA platform Zoth suffers second hack this month — loses $8.4M

Zoth, a real-world asset (RWA) restaking layer, has been hacked for $8.4 million of staked USD0++ after someone tampered with its proxy contract.  X user @0xtroll first spotted the exploit today. Blockchain security analyst Cyvers deduced that somebody using a suspicious address was able to tweak Zoth’s “USD0PPSubVaultUpgradeable” contract.  The hacker then withdrew $8.45 million worth of USD0++ before swapping it for DAI and back into ether (ETH), where 4,223 ETH (worth $8.29 million) currently sits. SlowMist Security Alert We have detected that @zothdotio has been exploited, likely due to a leakage of Admin privileges, resulting in the logic contract being tampered with and replaced by a malicious contract. Btw, thanks to @0xtroll for the shout-out. As always, stay… pic.twitter.com/nQfHPYT2OV — SlowMist (@SlowMist_Team) March 21, 2025 Read more: ‘AI’ crypto trading agent, aixbt, hacked for $100K Crypto analysts SlowMist also suggested that Zoth...

North Korea's Lazarus Group May Be Behind Bybit's $1.4B Hack

North Korea’s Lazarus Group is behind Bybit’s $1.4 billion hack earlier on Friday, according to an investigation by ZachXBT . Arkham Intelligence announced a bounty and investigation into finding the culprit behind the ByBit hack, where over $1B in Ethereum was stolen. JUST IN: North Korea's Lazarus Group behind Bybit's $1.4 billion hack, ZachXBT reports. — Watcher.Guru (@WatcherGuru) February 21, 2025 The Lazarus Group stole more than $1.4 billion in liquid-staked Ether and MetaETH (mETH), according to on-chain blockchain security analyst ZackXBT. ByBit Founder Ben Zhou assured users shortly after the hack, “All other cold wallets are secure.” “Unfortunately, this transaction was manipulated through a sophisticated attack that masked the singing interface, displaying the correct address while altering the underlying smart contract logic,” Zhou’s platform said. This allowed the hacker to gain control of the specified wallet in question and transfer funds. Arkham Inte...

Binance's memecoin platform loses almost $200K in hack

Binance’s memecoin platform, Four Meme, has suffered a malicious attack that’s reportedly led to losses of more than $180,000 worth of Binance Coin (BNB). Four Meme shared an “Emergency Announcement” today that said, “We are currently experiencing a malicious attack, and our team has intervened immediately to address the issue.”  It added, “To ensure security, token LP launched on @PancakeSwap is temporarily suspended, and will be reopened once our development team completes the fix, on-chain trading is operating normally.” Emergency Announcement We are currently experiencing a malicious attack, and our team has intervened immediately to address the issue. To ensure security, token LP launched on @PancakeSwap is temporarily suspended, and will be reopened once our development team completes… pic.twitter.com/kll3tI5Pme — Four.Meme (@four_meme_) February 11, 2025 Read more: Whitehat hacker rescues $1.5M from first DeFi hack of 2025 According...

Compound Finance and Celer Network websites compromised in ‘front-end’ attacks

The websites of crypto lending platform Compound Finance and Celer Network have been attacked, redirecting users to a malicious phishing site, according to multiple security researchers. Compound, one of the longest-established decentralized finance (DeFi) applications, holds assets worth over $2B, according to data from DeFiLlama. Celer’s cBridge allows users to send tokens between 14 blockchains, processing over $200M in volume last month. Security advisor to the Compound DAO, Michael Lewellen, posted a community alert via X (formerly Twitter), urging users to avoid the platform’s website . Compound Finance confirmed the attack 90 minutes later. The breach was highlighted earlier by ZachXBT via Telegram. ALERT: The https://t.co/vSAGYl6wwJ URL has been compromised and is currently hosting a phishing site. DO NOT interact with the https://t.co/vSAGYl6wwJ website until further notice. The Compound protocol itself is not impacted and all smart contract funds are safe. — Mich...

CoinGecko’s X accounts breached by hackers

Cryptocurrency aggregator CoinGecko faces a security breach as X accounts @CoinGecko and @GeckoTerminal are compromised; users cautioned against interaction. CoinGecko, a prominent cryptocurrency data aggregator, revealed that unauthorized users had accessed its two accounts . The company is swiftly investigating the situation and implementing measures to secure the affected accounts . https://twitter.com/coingecko/status/1745158344191717746?s=46&t=dmsu1E-fvpE3gV6zVX7Z7Q In a tweet, CoinGecko urged users not to click on any links or engage with suspicious content associated with the compromised accounts, emphasizing the paramount importance of user security. The company reassures its user base that they are committed to keeping them informed and maintaining a transparent communication channel throughout the resolution process. BE CAREFUL — another twitter hack, this time for @coingecko Also a reminder — $GECKO is a separate entity, and there are many copycats across multip...

X users at risk as crypto scammers exploit new design flaw

Crypto scammers have found a new way to abuse X interface to propagate scams, fake giveaways, and deceptive Telegram channels. As reported by BleepingComputer, fraudsters have started actively taking advantage of what appears to be a user interface flaw, enabling them to create seemingly legitimate URLs containing malicious content. This flaw, initially identified by X user @rcwht_, empowers scammers to publish tweets that mimic those from authentic accounts. Interesting scam crypto-related tweets. Link looks like it should direct to binance, but actually direct to some scammy account. Been tagged in two of these and they both use https://t.co/2HhH3FW3nT – anyone know whats going on here? pic.twitter.com/NVtFkm12d6 — Rob White (@rcwht_) December 17, 2023 According to BleepingComputer, scammers can change the status_id field, while putting the legitimate tag in the account_name field. For instance: https://x.com/[account_name]/status/[status_id] would look like ...

HTX marks $250m outflow post November hack

Massive outflows emerged from the crypto exchange following security breaches at three Justin Sun-affiliated platforms, including Heco Bridge and Poloniex.  Crypto users withdrew assets worth an estimated $258 million between Nov. 25, after HTX resumed operations, and Dec. 10, per DefiLlama data, indicating doubts regarding safety at the crypto exchange. The net outflows occurred following a Nov. 22 hack on HTX, resulting in over $23 million siphoned from the platform formerly called Huobi. Heco bridge, a Sun-backed cross-chain protocol, was also exploited for around $85 million. The total losses suffered during the breach reached more than $100 million. Before that, hackers stole $100 million in cryptocurrencies from Sun’s Poloniex exchange, and HTX lost $8 million to bad actors in September 2023, although the funds were later returned in October. The events amount to four separate hacks in three months with over $220 million in losses. You might also like: Justin Sun laun...

Mark Cuban narrowly avoids $2.5M loss in $900K crypto hack

Billionaire investor Mark Cuban fell victim to a phishing attack on Saturday after reportedly downloading a fake MetaMask application that caused him to lose almost $900,000 in crypto assets.  Cuban was unaware of the Hack until DLNews approached him. He told the outlet, “I’m pretty sure I downloaded a version of MetaMask with some sh*t in it.” “MetaMask crashed a couple times. I just stopped,” Cuban explained. “Then you [DL News] emailed me. So I locked my NFTs on OpenSea. Transferred all my Polygon in the account.”  His wallet was previously inactive for five months. He reportedly saved himself $2.5 million worth of Polygon tokens when he moved them to a Coinbase address.  “I went on MetaMask for the first time in months,” Cuban said. “They must have been watching.” Crypto sleuth WazzCrypto was the first on X (formally Twitter) to first notice that $870,000 of staked ETH (stETH), Tether USD (USDT), Matic tokens (MATIC), Rarible (RARI), USD Coin (...

Arkham Intelligence offers bounty for identifying FTX hacker

Blockchain analytics company Arkham Intelligence announced a bounty for information about the identity of the hacker that compromised the now-defunct cryptocurrency exchange FTX. In the announcement, Arkham Intelligence promised a bounty of 100,000 ARKM (the platform’s own tokens) for a value exceeding $46,000. To obtain the bounty , “users need to identify the person or entity behind the hack.” Participants also need to deposit 10 ARKM — a measure meant to prevent spam submissions. The deposit of the person who will provide the right information will be returned — and provide context for their decision, including research, public information, and cited sources credibly proving that the conclusion they came to is correct. You might also like: FTX hacker gets tips on how to launder $400 million When FTX was in the midst of its collapse back in November 2022, FTX representatives reported that the exchange fell victim to a hack that resulted in the loss o...