Posts

Showing posts with the label exploit

Balancer DAO salutes defi response team for aid in $230K UI exploit

Balancer DAO, a decentralized autonomous organization governing the protocol, protocol thanked a team of security experts for their help following a DNS attack on a top level .fi domain registrar employed by Balancer. Balancer DAO called attention to SEAL 911, a Telegram bot built during the Curve Wars that ensued following the Curve Finance exploit . The bot operates as an emergency channel that connects users and protocols to a pool of vetted defi security experts. The Balancer DAO would like to express its heartfelt gratitude to all ecosystem members who acted swiftly and diligently to mitigate the effect of the recent DNS attack. [1/5] pic.twitter.com/SeU43AMKPD — Balancer (@Balancer) September 22, 2023 Balancer DAO also extended thanks to Metamask developers Nikita and Taylor Mohana (Tayvano) for Metamask block-ups deployed to mitigate further attacks. Alone we can do so little, together we can do so much. Through collaboration, the Balancer ecosystem continues to gro...

Balancer protocol exploited for $900K as DeFi hacks mount: Finance Redefined

Image
DeFi exploits resulted in losses of over $16 million in August. Welcome to Finance Redefined, your weekly dose of essential decentralized finance (DeFi) insights — a newsletter crafted to bring you the most significant developments from the past week. In this week’s newsletter, Ethereum staking services have agreed upon a 22% limit on all validators to ensure fair markets. August proved to be another costly month for DeFi as several protocols were collectively exploited for $16 million. In separate exploit news, Balancer protocol lost nearly $900,000 due to a vulnerability flagged months ago. Shibarium’s second launch proved more stable as the layer-2 protocol already has over 100,000 new wallets, and USD Coin (USDC) is set to debut on Coinbase’s layer-2 platform later this week. The DeFi market had another late-week bearish decline due to an overall market fall after news dropped of a delay in the decision on approval of a spot Bitcoin’s spot exchange-traded fund (ETF). Most DeFi tok...

Tornado Cash Suffers Governance Attack, TORN Price Tumbles 50%

Image
Attackers are withdrawing TORN from the Tornado Cash governance vault, selling and swapping TORN for Ethereum (ETH). TORN price fell 35% to a low of $3.7 in 24hrs. advertisement Crypto exchanges such as Binance on May 21 suspended TORN deposits as a precautionary measure. However, some exchanges have announced continuing deposits and withdrawals. Please be informed that deposits and withdrawals of $TORN @tornado_cash remain active on @HuobiGlobal and @Poloniex. We're closely monitoring the situation and may adjust our policy as required to ensure secure. We appreciate your understanding and support. — H.E. Justin Sun 孙宇晨 (@justinsuntron) May 21, 2023 Recommended Articles Crypto Telegram Channels List 2023 [Updated] Must Read Crypto Presale Projects For 2023 To Invest; Updated List Must Read Explaine...

More than 280 blockchains at risk of ‘zero-day’ exploits, warns security firm

Dogecoin, Zcash and Litecoin have already patched the “critical” vulnerability, but hundreds of others may not have, risking billions' worth of crypto. 280 or more blockchain networks are estimated to be at risk of “zero-day” exploits that could put at least $25 billion worth of crypto at risk, according to cyber Security firm Halborn. In a Mar. 13 blog, Halborn warned of the vulnerability it dubbed “Rab13s” — adding it has already worked with some blockchains, such as Dogecoin, Litecoin and Zcash, to institute a fix for it. Halborn discovered massive #ZeroDay impacting Dogecoin and 280+ networks including Litecoin and Zcash, putting over $25 Billion of digital assets at risk! ... — Halborn (@HalbornSecurity) March 13, 2023 Halborn was contracted by Dogecoin in March 2022 to conduct a security review of its codebase and found “several critical and exploitable vulnerabilities.” It later determined those same vulnerabilities “affected over 280 other networks” that risked billi...

Hope Finance exploit results in $2M stolen from users' funds

Image
An Arbitrum-based algorithmic stablecoin project has fallen prey to a smart contract exploit, seeing $2 million stolen from users. Prospective users of an Arbitrum-based decentralized finance (DeFi) project have been left out of pocket following a $2 million exploit . Web3 security firm CertiK flagged the incident on Feb. 21, following an announcement from the Hope Finance Twitter account notifying users that they had been scammed. #CommunityAlert @hope_fin have announced the community has been scammed for ~$2m making this the largest #exitscam on Arbitrum in 2023. $1.86m was transferred to @TornadoCash. Hope_fin have posted steps for user's to withdraw their staked LPhttps://t.co/hJbFXiKujt — CertiK Alert (@CertiKAlert) February 21, 2023 Details of the project are difficult to come by. The platform’s Twitter account was launched in January 2023 and outlined plans for an algorithmic stablecoin called $HOPE which dynamically adjusts its supply relative to the price of ETH....

Hackers drain $8M in assets from Bitkeep wallets in latest DeFi exploit

The BitKeep team confirmed that some APK package downloads have been hijacked by attackers and installed by users. While many are still enjoying the holiday season, hackers are hard at work, draining around $8 million in an ongoing BitKeep wallet exploit.  On Dec. 26, some users of the multichain crypto wallet BitKeep reported that their funds were being drained and transferred while they were not using their wallets . In their official Telegram group, the BitKeep team confirmed that some APK package downloads have been hijacked by some attackers and have been installed with code that was implanted by hackers. They wrote: “If your funds are stolen, the application you download or update may be an unknown version (unofficial release version) hijacked.” As the hack continues, the BitKeep team urged its users to transfer their funds to a wallet that came from official sources like Google Play and the Apple App Store. Apart from this, the team also asked community members to use newly ...