DeFi hacks [history]

[zasad@]

As a result of the exploit, Beanstalk Farms lost about $182 million from the Defi project, in total, the hacker managed to withdraw funds for about $80 million using the Tornado Cash mixer.

https://twitter.com/PeckShieldAlert/status/1515715931963801603
https://twitter.com/PeckShieldAlert/status/1515715931963801603

https://www.theverge.com/2022/4/18/23030754/beanstalk-cryptocurrency-hack-182-million-dao-voting
Beanstalk cryptocurrency project robbed after hacker votes to send themself $182 million

https://decrypt.co/98118/ethereum-defi-protocol-beanstalk-hacked-182-million-what-you-need-know
Ethereum DeFi Protocol Beanstalk Hacked for $182 Million—What You Need to Know
Beanstalk got jacked by a giant flash attack.

https://etherscan.io/tx/0xcd314668aaa9bbfebaf1a0bd2b6553d01dd58899c508d4729fa7311dc5d33ad7

[1714016523]

1714016523

[1714016523]

1714016523

[1714016523]

1714016523

[Daltonik]

The Chinese company SlowMist, specializing in blockchain security, reported that in the period from April 12 to April 21, Terra network users lost their funds by clicking on phishing links placed in Google ads. Thus, the attacker withdrew funds for $4.31 million, in total assets were withdrawn from 52 addresses.

https://twitter.com/SlowMist_Team/status/1516961951032692736

[zasad@]

https://www.businessinsider.in/cryptocurrency/news/a-defi-hacker-compromised-a-lesser-known-protocol-but-forgot-to-take-their-winnings/articleshow/91003503.cms
"A DeFi hacker compromised a lesser-known protocol but forgot to take their winnings
The hacker compromised a protocol called Zeed for over $1 million.
DeFi hacks have become a serious concern for the crypto industry over the past year.
Almost 97% of all cryptocurrency stolen in 2022 came from DeFi protocols."

[zasad@]

Deus Finance $13.4M
https://www.coindesk.com/tech/2022/04/28/how-deus-finance-was-exploited-for-134m-on-fantom/
https://twitter.com/peckshield/status/1519530463337250817?
How Deus Finance Was Exploited for $13.4M on Fantom
The attack, which used a flash loan, was the second in two months.

[lionheart78]

DEFI Lender Rari Capital $80M+
https://finance.yahoo.com/news/defi-lender-rari-capital-fei-164816180.html
https://twitter.com/BlockSecTeam/status/1520350965274386433

The hacker exploited a reentrancy vulnerability in Rari's Fuse lending protocol, according to a tweet by smart contract analysis firm Block Sec.[1]

[1] https://finance.yahoo.com/news/defi-lender-rari-capital-fei-164816180.html

[zasad@]

https://cointelegraph.com/news/more-than-1-6-billion-exploited-from-defi-so-far-in-2022
More than $1.6 billion exploited from DeFi so far in 2022
The amount exploited this year so far surpasses the total amount stolen in all of 2020 and 2021 combined, with the month of March alone beating 2020 by over $200 million.

https://twitter.com/CertiKTech/status/1521195341982412809?
"We have seen $1.6B lost in the #crypto/#web3 world so far this year.
In just the first 4 months on 2022 we have passed the total amount lost in 2021 ($1.3B) and in 2020 ($516MM)."

https://bitcointalk.org/index.php?topic=5397109.msg60034017#msg60034017

[btc_angela]

^^ Not surprised with the numbers though, I mean with so much money flowing on Defi right now, the hackers are going to fill their pockets with this money and will still be aggressive this year.

And as we go along this 2022, there could be another big hacks, don't want to sound doom and gloom, but the developers will have to step their game as well so that they won't fall victims from this hacking groups.

[zasad@]

https://decrypt.co/93874/biggest-defi-hacks-heists
13 Biggest DeFi Hacks and Heists
There's a lot of money flowing into DeFi. And thanks to hacks and exploits, there's sometimes a lot of money flowing out, too.
1.Poly Network: $611 Million
2.Ronin: $552 Million
3.Wormhole: $326 Million
..

[RussianEnglishTranslation]

The benefit of using DeFi on new chains like CNDL and HBAR is that these chains are using EVM contracts that are tried and tested. DApps are just porting their code over to the new chains. It's when you get experimental DeFi stuff where things get hacked most of the time, or they are pretend hacks and real exit scams by the devs.

[zasad@]

Mirror Protocol Being Attacked as $2 Million Already Drained by Hacker
https://u.today/mirror-protocol-being-attacked-as-2-million-already-drained-by-hacker
"Because of an incorrect calculation, with only $1,000 worth of Luna, hackers can easily get $1.3 million in collateral, while its real value is significantly lower. Despite a low collateral price, traders can still easily borrow real funds and withdraw them without worrying about their cheap collateral."

[Daltonik]

On May 4, hackers hacked the Discord servers of the Bored Ape Yacht Club (BAYC) project and with the help of phishing links placed in the channels, they stole 200ETH or ~$360,000. The exploit, according to the developers, was of a short-term nature and was quickly neutralized by the BAYC team.

https://www.coindesk.com/business/2022/06/04/yuga-labs-confirms-discord-server-hack-200-eth-worth-of-nfts-stolen/

[Daltonik]

The hacker using the exploit managed to withdraw 1.65 million EGLD or about $113 million from Maiar DEX after discovering the fact of suspicious actions, the exchange was taken offline to investigate and eliminate the vulnerability. https://twitter.com/beniaminmincu/status/1533598583001337863
https://cointelegraph.com/news/maiar-decentralized-crypto-exchange-goes-offline-after-bug-discovery

[zasad@]

https://decrypt.co/102377/ethereum-layer-2-solution-optimism-loses-20-million-tokens-in-interlayer-snafu
Ethereum Layer-2 Solution Optimism Loses 20 Million Tokens in Interlayer Snafu
"The anonymous thief has sold off one million of the tokens as launch partner Wintermute tries to coax the hacker into cooperating.
In brief
The Layer 2 scaling solution provider failed to sync its Optimism address to an Ethereum address before a large transfer.
The stolen OP tokens were valued at $35 million at the time of the hack, with 19 million tokens still missing."

https://cointelegraph.com/news/optimism-loses-20m-tokens-after-l1-and-l2-confusion-exploited


____
Last Updated Jun 10, 2022 @ 11:31
https://cryptopotato.com/optimism-hacker-promises-to-return-18m-op-tokens-sends-another-1m-to-buterin/
Optimism Hacker Promises to Return 18M OP Tokens, Sends Another 1M to Buterin

[Daltonik]

...
Last Updated Jun 10, 2022 @ 11:31
https://cryptopotato.com/optimism-hacker-promises-to-return-18m-op-tokens-sends-another-1m-to-buterin/
Optimism Hacker Promises to Return 18M OP Tokens, Sends Another 1M to Buterin

Well, at least the story with a happy ending really still knows how VB can benefit in non-obvious cases, because what happened is also part of his fault as a developer, because sending a hacker 1 M VB can be regarded as a sign of gratitude, in any case, the hacker still owns 1 million OP https://optimistic.etherscan.io/address/0x60b28637879b5a09d21b68040020ffbf7dba5107

[zasad@]

Inverse Finance Loses $1.2M to Hackers
https://coinfomania.com/defi-protocol-inverse-finance-hacked-again-for-1-2m/
"PeckShield said the attack was initiated with a flash loan worth 27,000 Wrapped Bitcoin (WBTC). The large deposit received from the loan was then used to manipulate the price of the protocol’s pool of funds. In the process, assets such as Tether USD (USDT), DOLA, Wrapped Bitcoin (WBTC), and Curve DAO token (CRV) were used."

https://twitter.com/peckshield/status/1537382891230883841

[Daltonik]

The Harmony team notifies about the loss of assets worth ~ $ 100 million (85,867 ETH) as a result of a successful hacker attack on the Horizon cross-chain bridge, the developers have contacted law enforcement agencies and an investigation of the incident has been launched.
hacker's address: https://etherscan.io/address/0x0d043128146654c7683fbf30ac98d7b2285ded00

https://twitter.com/harmonyprotocol/status/1540110924400324608

[zasad@]

https://decrypt.co/104138/north-korean-attackers-behind-100m-harmony-hack-report
North Korean Attackers Behind $100M Harmony Hack: Report
"Analysis suggests the hack is the work of the Lazarus Group, the Pyongyang-backed group behind a similar $622 million hack of Axie Infinity.

According to a report released today by blockchain analytics firm Elliptic, the manner in which the funds were stolen and subsequently laundered points to the involvement of The Lazarus Group, a notorious North Korea-affiliated cybercriminal organization."

[Daltonik]

Optimism NFT marketplace Quixotic as a result of an exploit caused by an unsuccessful contract update, which was used by a hacker, lost $100,000 in ERC - 20 tokens< the Quixotic team informs that all tokens will be returned to the owners, and their NFTs are safe.

https://twitter.com/quixotic_io/status/1542790067130978307

[Daltonik]

Hackers have emptied the $6 million Crema Finance liquidity pool, according to blockchain auditor OtterSec hackers used flash loans on the Solend landing platform. Crema Finance was forced to suspend the operation of its application.

https://twitter.com/osec_io/status/1543469811287465984
https://twitter.com/Crema_Finance/status/1543416225622941696

[Daltonik]

The hacker returns 6,064 ETH and 23,967.9 SOL stolen by him from the Crema Finance protocol, as a reward, the hacker left 45,455 SOL for himself. According to the Crema Finance team, they managed to reach such an agreement thanks to lengthy negotiations with the attacker.

https://twitter.com/Crema_Finance/status/1544792330674135040