DeFi hacks [history]

[o48o]

That's like modern day bank robbery but more effective and profitable. And while whose seem a lot, i think that centralized exchange hacks combined with exit scams are far worse.

As in comparison bitfinex lost $623 million in one hack, coincheck $560 million, and FTX just got hacked for $600 million. And if we start to count exit scams, remember that plustoken team got $2.9 Billion and ran. Not to mention all the leaked user data with all the cexes.

[dbshck]

https://www.bloomberg.com/news/articles/2022-10-12/crypto-platform-mango-hit-by-latest-hack-in-digital-asset-sector#
Crypto Attack Swipes $100 Million From DeFi Service Mango
"Incident comes just days after $100 million Binance Coin hack
Mango says attackers indicated a willingness to communicate

An attacker spirited away about $100 million from decentralized finance provider Mango by manipulating the price of its token in an exploit that wiped out depositors on the crypto platform.

The heist began with two accounts funded with the stablecoin USD Coin, the platform said Wednesday on Twitter. The accounts took large positions in Mango perpetual futures, causing the price of the Mango token to spike."

Update: Mango exploiter (Avraham Eisenberg) arrested https://www.coindesk.com/policy/2022/12/27/mango-markets-exploiter-eisenberg-arrested-in-puerto-rico/

[zasad@]

Rubic DEX aggregator hack leads to $1.4m of user funds stolen
https://crypto.news/rubic-dex-aggregator-hack-leads-to-1-4m-of-user-funds-stolen/
Cross-chain decentralized finance (DeFi) protocol Rubic was compromised, resulting in funds stored in its user’s addresses being siphoned out and transferred to the hackers.


Defrost Finance hack & Returned $12M
https://www.coindesk.com/business/2022/12/26/defrost-finance-says-hacked-funds-have-been-returned/
Defrost Finance Says Hacked Funds Have Been Returned
The hack, which some observers had characterized as a rug pull, was estimated to have netted $12 million.



___

Update: Mango exploiter (Avraham Eisenberg) arrested https://www.coindesk.com/policy/2022/12/27/mango-markets-exploiter-eisenberg-arrested-in-puerto-rico/

add to OP

[FP91G]

Hackers have been able to steal NFTs like magic with a little-known OpenSea feature. It's the newest hack, and multiple millions in Apes have been lost to it already.
https://twitter.com/harpieio/status/1606034727491624961?

The OpenSea contract allows for "gasless sales," where users can sell NFTs by signing an unreadable message like the one above.
Here's the catch: you can also set up ⚠️private auctions with custom prices⚠️ with these unreadable signatures.
https://twitter.com/harpieio/status/1606034729102217216

[zasad@]

Nikhil Gopalani- COO / Ops & BD - Nike / RTFKT
https://www.crunchbase.com/person/nikhil-gopalani

Nikhil Gopalani(C)
https://twitter.com/Nikgopalani/status/1610120899570663425
"Hey Clone X community - I was hacked by a clever Phisher (same phone # as apple ID) & sold all my clone x / some other nfts... Obviously pretty upset and hurt by this and I havent really been able to move all day. Hope people who bought my clones love them (being positive)"


https://twitter.com/ImmuneBytes/status/1610683109904912384
"RTFKT COO @Nikgopalani
 became the victim of a #phishing attack. On Jan 2, he allegedly lost $173,000 worth of #NFTs to the exploit.
The list of stolen NFTs includes 19 CloneX NFTs, 18 RTKFT Space Pods, 17 Loot Pods, 11 CryptoKicks, 19 RTFKT Animus Eggs, and more. Source:
@opensea"

[safar1980]

SlowMist 2022 Security Report: Hacking incidents caused losses of $3.777b, a decrease of about 61% compared to $9.795b in 2021. In 2022, there were 10 security incidents with a loss of hundreds of millions, cross-chain bridges accounted for 4 of them.
https://twitter.com/WuBlockchain/status/1612448354591727616?

[safar1980]

Famous NFT influencer NFT God suffered a hacking scheme.
https://chainwitcher.com/nft-god-hacked/

Last night my entire digital livelihood was violated.
Every account connected to me both personally and professionally was hacked and used to hurt others.
Less importantly, I lost a life changing amount of my net worth
https://twitter.com/NFT_GOD/status/1614442000958324739

What conceit do you need to have to call yourself God?

[zasad@]

https://techcrunch.com/2023/01/24/north-korea-fbi-harmony-horizon-crypto/
FBI accuses North Korean government hackers of stealing $100M in Harmony bridge theft
"The FBI accused two groups of North Korean government hackers of carrying out last year’s heist of $100 million in crypto stolen from a company that allows users to transfer cryptocurrency from one blockchain to another.

On Monday, the FBI announced that the Lazarus Group and APT38 — two groups linked to the North Korean government by both cybersecurity companies and government agencies — were responsible for the hack against the Horizon bridge, created by the U.S. company Harmony, in June 2022."

[zasad@]

https://cointelegraph.com/news/hackers-takeover-azuki-s-twitter-account-steal-over-750k-in-less-than-30-minutes
Hackers breach Azuki’s Twitter account, stealing $758K in 30 minutes
Most of the funds stolen were from a single wallet, with $751,321.80 in USDC drained from the malicious link.

https://twitter.com/emilyrosemcg/status/1619046380533854209?
"AZUKI OFFICIAL TWITTER ACCOUNT IS HACKED.
DO NOT CLICK LINKS FROM OUR ACCOUNT.
PLEASE RETWEET."

Another Defi Hack
https://bitcointalk.org/index.php?topic=5267124.0

https://twitter.com/BonqDAO/status/1620908233761378304
"Bonq protocol was exposed to an oracle hack, where exploiter increased the ALBT price and minted large amounts of BEUR. The BEUR was then swapped for other tokens on Uniswap. Then, the price was decreased to almost zero, which triggered the liquidation of ALBT troves."

BonqDAO protocol suffers $120M loss after oracle hack
https://cointelegraph.com/news/bonqdao-protocol-suffers-120m-loss-after-oracle-hack

Subscribe to the project's twitter and discord. If the project does not die, they will publish an article on how they will recoup the losses.

[Daltonik]

The BonqDAO protocol lost $120 million as a result of a hacker attack, where the hacker used the method of manipulating the price of the ALBT token, so he informed the protocol that the cost of the ALBT token is equal to 5 billion MATIC, which the protocol actually agreed with, despite the fact that the BonqDAO protocol has an oracle from Chainlink.

Source: https://cointelegraph.com/news/bonqdao-protocol-suffers-120m-loss-after-oracle-hack
             https://twitter.com/BonqDAO/status/1620908233761378304
             https://twitter.com/peckshield/status/1620926816868499458

[zasad@]

https://twitter.com/peckshieldalert/status/1620452597105676291?
"#PeckShieldAlert ~24 exploits grabbed $8.8M in January 2023.
As of January 31st, 2023, ~$2.6M worth of stolen funds (~2,668 $BNB & 1,200 $ETH) were transferred into Mixers (TornadoCash, Fixedfloat, and sideshift[.]ai)."




https://crypto.news/lendhub-loses-6m-to-hackers/
LendHub loses $6m to hackers
According to a report issued by the team on Friday, DeFi digital asset lending firm LendHub has lost $6 million in digital assets on its network.

[safar1980]

Orion Protocol Hacked, $3 Million Lost: Here's How
PeckShield, a reputable cryptocurrency security research team, unveils the design of alleged attacks against Orion Protocol. Meanwhile, its team says only internal funds were at risk. Orion Protocol hacked for $3 million thanks to well-known bug: PeckShield According to the statement shared by PeckShield representatives on Twitter, Orion Protocol, a popular liquidity machine for CEXes and DEXes, suffered a hacker attack today, Feb. 3, 2023.

[zasad@]

2023 DeFi hacks. Continuation
1 post has exhausted the limit of information, the continuation will be in this post

January 4, 2023
RTFKT COO Nikgopalani $0,173M
https://bitcointalk.org/index.php?topic=5267124.msg61547671#msg61547671

January 12, 2023
LendHub loses $6M
https://bitcointalk.org/index.php?topic=5267124.msg61703100#msg61703100

February 1,2023
BonqDAO protocol suffers $120M
https://bitcointalk.org/index.php?topic=5267124.msg61691280#msg61691280

February 3,2023
Orion Protocol  $3M
https://bitcointalk.org/index.php?topic=5267124.msg61709050#msg61709050

February 9,2023
CoW Swapl  $0,182M
https://bitcointalk.org/index.php?topic=5267124.msg61740866#msg61740866

February 10,2023
DeFi Protocol dForce $3,65M
https://bitcointalk.org/index.php?topic=5267124.msg61746599#msg61746599

February 16,2023
DeFi Protocol Platypus  $8,5M
https://bitcointalk.org/index.php?topic=5267124.msg61802035#msg61802035

February 27,2023
DeFi Protocol  LaunchZone  $0,7M
https://bitcointalk.org/index.php?topic=5267124.msg61837040#msg61837040

March 13,2023
Euler Finance  $196M
https://bitcointalk.org/index.php?topic=5267124.msg61904478#msg61904478

March 13,2023
PeopleDAO  $0,12M
https://bitcointalk.org/index.php?topic=5267124.msg61916813#msg61916813

March 26,2023
Kokomo Finance $4M
https://bitcointalk.org/index.php?topic=5267124.msg61998945#msg61998945

March 29,2023
DEFISafeMoon $8,9M
https://bitcointalk.org/index.php?topic=5267124.msg62004227#msg62004227

April 4, 2023
Exploiter Front Runs $25M
https://bitcointalk.org/index.php?topic=5267124.msg62037817#msg62037817

April 10, 2023
SushiSwap $3,3M
https://bitcointalk.org/index.php?topic=5267124.msg62067347#msg62067347

April 13, 2023
Yearn Finance $11M
https://bitcointalk.org/index.php?topic=5267124.msg62115758#msg62115758

April 16, 2023
Hundred Finance Protocol $7.4M
https://bitcointalk.org/index.php?topic=5267124.msg62151334#msg62151334

April 25, 2023
zkSync DEX Merlin $1.82M
https://bitcointalk.org/index.php?topic=5267124.msg62152558#msg62152558

May 1, 2023
Level Finance $1M
https://bitcointalk.org/index.php?topic=5267124.msg62189833#msg62189833

May 10, 2023
Deus Finance $6M
https://bitcointalk.org/index.php?topic=5267124.msg62225011#msg62225011

May 20, 2023
Swaprum $3M
https://bitcointalk.org/index.php?topic=5267124.msg62333807#msg62333807

May 25, 2023
ZachXBT: $31.6M
https://bitcointalk.org/index.php?topic=5267124.msg62299944#msg62299944

May 30, 2023
Jimbos Protocol: $7.5M
https://bitcointalk.org/index.php?topic=5267124.msg62334136#msg62334136

June 12, 2023
Sturdy Finance: $0.8M
https://bitcointalk.org/index.php?topic=5267124.msg62406071#msg62406071

June 14, 2023
Hashflow: $0.6M
https://bitcointalk.org/index.php?topic=5267124.msg62409187#msg62409187

June 27, 2023
Chibi Finance: $1M
https://bitcointalk.org/index.php?topic=5267124.msg62475146#msg62475146

July 04, 2023
Poly Network: $5M
https://bitcointalk.org/index.php?topic=5267124.msg62503144#msg62503144

July 07, 2023
Multichain Fantom Bridge: $126M
https://bitcointalk.org/index.php?topic=5267124.msg62515049#msg62515049

July 12, 2023
Arcadia Finance: $0.455M
https://bitcointalk.org/index.php?topic=5267124.msg62539307#msg62539307

July 17, 2023
Rodeo Finance: $0.888M
https://bitcointalk.org/index.php?topic=5267124.msg62572884#msg62572884

July 21, 2023
Conic Finance: $3.2M
https://bitcointalk.org/index.php?topic=5267124.msg62582178#msg62582178

July 26, 2023
Era Lend: $3.4M
https://bitcointalk.org/index.php?topic=5267124.msg62604116#msg62604116

August 1, 2023
Curve Finance: $52M
https://bitcointalk.org/index.php?topic=5267124.msg62631337#msg62631337

August 2, 2023
Kannagi Finance: $3.4 M
https://bitcointalk.org/index.php?topic=5267124.msg62636636#msg62636636

August 8, 2023
decentralized exchange Cypher: $1 M
https://bitcointalk.org/index.php?topic=5267124.msg62669792#msg62669792

August 14, 2023
Steadefi: $1.1 M
https://bitcointalk.org/index.php?topic=5267124.msg62704762#msg62704762

August 14, 2023
Aave’s Earning Farm: $0.287 M
https://bitcointalk.org/index.php?topic=5267124.msg62704762#msg62704762

August 14, 2023
Uwerx: $0.327 M
https://bitcointalk.org/index.php?topic=5267124.msg62704762#msg62704762

August 14, 2023
Zunami Protocol: $2.1 M
https://bitcointalk.org/index.php?topic=5267124.msg62704762#msg62704762

August 30, 2023
Exactly Protoco: $7.3 M
https://bitcointalk.org/index.php?topic=5267124.msg62769424#msg62769424

August 30, 2023
Magnate Finance: $6.4 M
https://bitcointalk.org/index.php?topic=5267124.msg62769424#msg62769424

September 05, 2023
Stake.com: $41 M
https://bitcointalk.org/index.php?topic=5267124.msg62804160#msg62804160

September 20, 2023
Harbour: $0,25 M
https://bitcointalk.org/index.php?topic=5267124.msg62875589#msg62875589

September 20, 2023
MBL Computer: $0,8 M
https://bitcointalk.org/index.php?topic=5267124.msg62875589#msg62875589

September 27, 2023
Mixin Network: $200 M
https://bitcointalk.org/index.php?topic=5267124.msg62908895#msg62908895

October 08, 2023
Galxe platform: $0,15 M
https://bitcointalk.org/index.php?topic=5267124.msg62980429#msg62980429

October 11, 2023
Star arena: $0,274 M
https://bitcointalk.org/index.php?topic=5267124.msg62980886#msg62980886

October 12, 2023
Platypus Finance: $2 M
https://bitcointalk.org/index.php?topic=5267124.msg62983709#msg62983709

November 01, 2023
Onyx Protocol: $2.1 M
https://bitcointalk.org/index.php?topic=5267124.msg63089287#msg63089287

November 08, 2023
AstridFinance: $0.245 M
https://bitcointalk.org/index.php?topic=5267124.msg63123860#msg63123860

November 15, 2023
Raft: $3.3 M
https://bitcointalk.org/index.php?topic=5267124.msg63163154#msg63163154

November 23, 2023
KyberSwap: $48 M
https://bitcointalk.org/index.php?topic=5267124.msg63206715#msg63206715

December 06, 2023
Florence Finance: $1.45 M
https://bitcointalk.org/index.php?topic=5267124.msg63278918#msg63278918

December 14, 2023
OKX Dex: $0.37 M
https://bitcointalk.org/index.php?topic=5267124.msg63320564#msg63320564

December 28, 2023
Across Protocol: $0.88 M
https://bitcointalk.org/index.php?topic=5267124.msg63401295#msg63401295

December 31, 2023
Orbit Chain's bridge: $81.5 M
https://bitcointalk.org/index.php?topic=5267124.msg63433078#msg63433078

December 31, 2023
Levana Protocol$1M
https://bitcointalk.org/index.php?topic=5267124.msg63434618#msg63434618

2024 DeFi hacks. Continuation

January 3, 2024
Radiant Capital $4.4M
https://bitcointalk.org/index.php?topic=5267124.msg63438775#msg63438775

January 17, 2024
Socket $3.3M
https://bitcointalk.org/index.php?topic=5267124.msg63512194#msg63512194

January 24, 2024
Concentric.fi $1.6M
https://bitcointalk.org/index.php?topic=5267124.msg63549538#msg63549538

January 25, 2024
Gamee $7M
https://bitcointalk.org/index.php?topic=5267124.msg63555379#msg63555379

February 23,2024
Sky Mavis Co-Founder Jeffrey Zirlin’s $9.7M
https://bitcointalk.org/index.php?topic=5267124.msg63709404#msg63709404

February 28,2024
MicroStrategy’s X account hacked $0.42M
https://bitcointalk.org/index.php?topic=5267124.msg63730629#msg63730629

March 02,2024
SenecaUSD $6.5M
https://bitcointalk.org/index.php?topic=5267124.msg63748555#msg63748555

March 06,2024
OrdiZK Team $1.4M
https://bitcointalk.org/index.php?topic=5267124.msg63765847#msg63765847

March 06,2024
WOOFi $8M
https://bitcointalk.org/index.php?topic=5267124.msg63767952#msg63767952

April 03,2024
Web3 gaming platform Munchables $62.5M
https://bitcointalk.org/index.php?topic=5267124.msg63895187#msg63895187

April 10,2024
Prisma Finance $11M
https://bitcointalk.org/index.php?topic=5267124.msg63927999#msg63927999



to be continued..

__
hacked DeFi bridges
https://gist.github.com/cwhinfrey/9fd1bbc31bbcff08fca242b90c7f875d

[zasad@]

reserve

[safar1980]

CoW Swap hacker milks over 550 BNB using ‘solver’ exploit
Security firm PeckShield reported that the hacker successfully drained roughly 551 BNB off CoW Swap into Tornado Cash, which was worth around $181,600 at the time of writing.

https://cointelegraph.com/news/cow-swap-hacker-milks-over-550-bnb-using-solver-exploit

[zasad@]

https://thenewscrypto.com/defi-protocol-dforce-exploited-of-3-65-million-by-hacker/
DeFi Protocol dForce Exploited of $3.65 Million by Hacker
"Initial funding of 0.99ETH was transmitted from the DeFi system RAILGUN Project.
dForce said the assault, which affected just its wstETH/ETH-Curve vault, had been stopped.
To the tune of $3.6 million in cryptocurrency, an assault on the reentrancy vulnerability of the decentralized finance (DeFi) protocol dForce has resulted in the theft of funds. Curve Finance is an automated market maker (AMM) platform. That uses the Arbitrum and Optimism blockchains, and its vault was the target of the hack."

[safar1980]

Norwegian Authorities Seize $5.9M From Crypto Game Axie Infinity Hack
The economic crime unit said it is the biggest crypto seizure ever made by Norwegian police.
https://www.coindesk.com/policy/2023/02/16/norwegian-authorities-seize-59m-from-crypto-game-axie-infinity-hack/

[zasad@]

https://www.coindesk.com/markets/2023/02/16/usp-stablecoin-loses-dollar-peg-as-defi-protocol-platypus-suffers-85m-attack/
USP Stablecoin Loses Dollar Peg as DeFi Protocol Platypus Suffers $8.5M Attack
"The flash loan attack caused Platypus Finance’s native stablecoin to fall to 48 cents from $1. The potential loss is $8.5 million, according to blockchain security firm CertiK.
Decentralized finance (DeFi) protocol Platypus Finance suffered a flash-loan attack on Thursday, blockchain security firm CertiK tweeted. The potential loss in the exploit is $8.5 million.
Platypus USD (USP), the protocol’s stablecoin, lost its price peg to the dollar as a result of the exploit, falling to 48 cents from its $1 anchor, according to CoinGecko.
"For now all operations are paused until we get more clarity," a Platypus team member posted in the protocol's Discord server."

[safar1980]

Suspects in $9M DeFi platform Platypus attack arrested in France

French police have arrested suspects alleged to have stolen over $8 million from the decentralized finance (DeFi) platform Platypus Finance.
https://coingeek.com/suspects-in-9m-defi-platform-platypus-attack-arrested-in-france/

[zasad@]

https://cointelegraph.com/news/700-000-drained-from-bnb-chain-based-defi-protocol-launchzone
$700,000 drained from BNB Chain-based DeFi protocol LaunchZone
BNB Chain-based DeFi protocol LaunchZone claims an exploit led to $700,000 of funds being drained from its liquidity pool, with its native token plunging in value.
"$700,000 worth of funds has been drained from BNB Chain-based decentralized finance (DeFi) protocol LaunchZone, with the project alleging an attacker carried out an exploit.

Details remain scarce after more than 80% of funds in the LaunchZone liquidity pool were drained on Feb. 27. A message on the project’s official Telegram group warned users not to buy tokens until more information has been gathered:"