DeFi hacks [history]

[dansus021]

can i add in the list wintermute hack lost $160m source : https://rekt.news/wintermute-rekt-2/

also this website is reliable telling me about current hack in defi

[Daltonik]

The news is not related to DeFi, but it still concerns the vulnerability of addresses to hacking if you have ever used the Profanity address generator, hackers managed to steal ~732 ETH ($950,000) from the Ethereum address created with it using the well-known vulnerability of this generator.

https://twitter.com/PeckShieldAlert/status/1574286302501306368

[zasad@]

The news is not related to DeFi, but it still concerns the vulnerability of addresses to hacking if you have ever used the Profanity address generator, hackers managed to steal ~732 ETH ($950,000) from the Ethereum address created with it using the well-known vulnerability of this generator.

https://twitter.com/PeckShieldAlert/status/1574286302501306368

Hacker steals $950,000 from crypto vanity address as exploits continue
https://www.theblock.co/post/172773/hacker-steals-950000-from-crypto-vanity-address-as-exploits-continue
"Hackers are continuing to steal cryptocurrency through an exploit linked to vanity addresses created by a tool called Profanity.
The latest hack comes after Wintermute lost $160 million as a result of this issue."

[zasad@]

Transit Swap loses over $21M

https://cointelegraph.com/news/transit-swap-loses-over-21m-due-to-internal-bug-hack-issues-apology
Transit Swap loses over $21M due to code bug exploit, issues apology


https://www.coindesk.com/business/2022/10/03/transit-swap-exploiter-returns-large-chunk-of-289m-hack/

Transit Swap Exploiter Returns Large Chunk of $28.9M Hack
Security firms help locate the hacker's IP address following the $28.9 million exploit.

In a blog post published on Monday, Transit Swap said that $18.9 million has been returned after a slew of security firms helped triangulate the hacker's IP address.
https://medium.com/@TransitSwap/updates-about-transitfinance-4731c38d6910

[RussiaUkraineTranslation]

Lately the target for hacks have been bridges because that is where the most money is. Audited DeFi platforms like MAXX finance and HEX are secure and well tested.

[zasad@]

BNB BRIDGE - REKT  $80M
https://rekt.news/bnb-bridge-rekt/
"2M BNB stolen in a hack as complex as Binance’s naming system.

BSC Token Hub, the BNB bridge between the old Binance Beacon Chain and BSC, now BNB Chain… was exploited into minting two lots of 1M BNB directly to the hacker’s address."

BNB Chain Resumes Activity After 2 Million Token Exploit
https://decrypt.co/111448/bnb-chain-resumes-activity-2-million-token-exploit

[Daltonik]

BNB BRIDGE - REKT  $80M
https://rekt.news/bnb-bridge-rekt/
"2M BNB stolen in a hack as complex as Binance’s naming system.

BSC Token Hub, the BNB bridge between the old Binance Beacon Chain and BSC, now BNB Chain… was exploited into minting two lots of 1M BNB directly to the hacker’s address."

BNB Chain Resumes Activity After 2 Million Token Exploit
https://decrypt.co/111448/bnb-chain-resumes-activity-2-million-token-exploit

After the incident with the hacking of the BSC Token Hub bridge, the BSC development team proposed holding a vote on chain management on the following issues:
1. Should hacked funds be frozen or not?
2. Do I need to use automatic BNB burning to cover the remaining hacked funds or not?
3. Conducting a Whitehat program for future detected errors, $1 million for each significant error detected.
4. Announcement of a reward for the capture of hackers, up to 10% of the funds returned.
The BSC validator voting feature for general opinion will be enabled in the next few days as a result of the BNB Beacon Chain update.

Source: https://www.bnbchain.org/en/blog/bnb-chain-ecosystem-update/

[Aliem Nur]

BNB BRIDGE - REKT  $80M
https://rekt.news/bnb-bridge-rekt/
"2M BNB stolen in a hack as complex as Binance’s naming system.

BSC Token Hub, the BNB bridge between the old Binance Beacon Chain and BSC, now BNB Chain… was exploited into minting two lots of 1M BNB directly to the hacker’s address."

BNB Chain Resumes Activity After 2 Million Token Exploit
https://decrypt.co/111448/bnb-chain-resumes-activity-2-million-token-exploit

this is the latest, I'm really shocked about BNBChain getting hacked when Binance is also very massive working on the project,
and of course this is like a blow to CZ, because it's a very large number, reportedly the BNBChain network will be paused for the next few hours,
is it when is this back to normal again?.

[zasad@]

BNB BRIDGE - REKT  $80M
https://rekt.news/bnb-bridge-rekt/
"2M BNB stolen in a hack as complex as Binance’s naming system.

BSC Token Hub, the BNB bridge between the old Binance Beacon Chain and BSC, now BNB Chain… was exploited into minting two lots of 1M BNB directly to the hacker’s address."

BNB Chain Resumes Activity After 2 Million Token Exploit
https://decrypt.co/111448/bnb-chain-resumes-activity-2-million-token-exploit

this is the latest, I'm really shocked about BNBChain getting hacked when Binance is also very massive working on the project,
and of course this is like a blow to CZ, because it's a very large number, reportedly the BNBChain network will be paused for the next few hours,
is it when is this back to normal again?.

CZ has already tweeted that user funds are safe. I'm more concerned that validators will get the right to run a decentralized blockchain, even though smart chain binance was not considered decentralized. But the developers want to implement the same thing in Ethereum with the new ERC-20R/721R token standard.

[Daltonik]

Little by little, funds are being refunded to dex Transit Swap users affected by the hacker, who returned 6,500 BNB and promises to return another 3,500 BNB later for a reward of 2,500 BNB. Such an agreement was reached by the Transit Swap team as a result of negotiations with the hacker, who previously returned most of the stolen.

https://medium.com/@TransitSwap/updates-about-transitfinance-317f4fe67931

[zasad@]

https://www.bloomberg.com/news/articles/2022-10-12/crypto-platform-mango-hit-by-latest-hack-in-digital-asset-sector#
Crypto Attack Swipes $100 Million From DeFi Service Mango
"Incident comes just days after $100 million Binance Coin hack
Mango says attackers indicated a willingness to communicate

An attacker spirited away about $100 million from decentralized finance provider Mango by manipulating the price of its token in an exploit that wiped out depositors on the crypto platform.

The heist began with two accounts funded with the stablecoin USD Coin, the platform said Wednesday on Twitter. The accounts took large positions in Mango perpetual futures, causing the price of the Mango token to spike."
____

https://www.theblock.co/post/176299/hacker-steals-2-3-million-from-templedao
Hacker steals $2.3 million from TempleDAO

[Daltonik]

Chainalysis collected statistics on hacking this year, so for example, October 2022 has not ended yet, but it has already become the largest month in the history of hacking activity for the entire year. So far this month, $718 million has been stolen from the DeFi protocols using 11 different hacks.



Cross-chain bridges are the main target for hackers: in October, 3 bridges were hacked and almost $600 million was stolen, this is 82% of losses this month and 64% of losses for the whole year.



During this year, hackers earned more than $3 billion for 125 hacks.



Analysis of hacks shows that if cex was previously the target of hackers , then starting from 2021 their main goal is Defi protocols.



Source: https://twitter.com/chainalysis/status/1580312153269374980

[Daltonik]

Mango Markets is due to complete the voting on October 15, according to the approval of the payment to the hacker in the amount of $47 million, already more than 98% of voting tokens approve the transaction.
By the way, under the terms of the deal with the hacker, it is stipulated that Mango Markets will not bring him to criminal responsibility.
This will be one of the largest payments to a hacker, if we consider that he spent $10 million on carrying out the attack, then his catch will be $37 million.

Source: https://cointelegraph.com/news/mango-market-s-dao-forum-set-to-approve-47m-settlement-with-hacker

[zasad@]

Celo Protocol Moola Market Loses Over $10M in Market Manipulation Attack
https://www.coindesk.com/markets/2022/10/19/celo-protocol-moola-market-loses-over-10m-in-market-manipulation-attack/

"Celo-based lending and borrowing protocol Moola Market had over $10 million worth of tokens stolen, and later returned, Wednesday morning after a market manipulation attack.
The exploit was the second of its kind in the last few weeks, with the attackers manipulating the prices of Moola’s native MOO tokens to borrow collateral against their positions – effectively draining the protocol."

[NicNacCoin]

Defi projects are the most hacked in a very short period of time.So many coins have been hacked in such a short period of time which is really sad.But I invested in two Defi platforms and now they are worthless. In fact, such projects come and leave people in a very confused state and people are completely out of the hands of various investments Destroys trust. People are afraid to invest only because of these reasons

[Daltonik]

Celo Protocol Moola Market Loses Over $10M in Market Manipulation Attack
https://www.coindesk.com/markets/2022/10/19/celo-protocol-moola-market-loses-over-10m-in-market-manipulation-attack/

"Celo-based lending and borrowing protocol Moola Market had over $10 million worth of tokens stolen, and later returned, Wednesday morning after a market manipulation attack.
The exploit was the second of its kind in the last few weeks, with the attackers manipulating the prices of Moola’s native MOO tokens to borrow collateral against their positions – effectively draining the protocol."

The latest data analytically indicate a loss of approximately $8.4 million in assets of several tokens 8.8M CELO ($6.5M), 765k cEUR ($0.7M), 1.8M MOO ($0.6M) and 644k cUSD https://twitter.com/FrankResearcher/status/1582448720985014273 , but this of course does not affect anything another vulnerability of the Defi protocol was used

[Ipyana MW]

Some stats from quarter 3, 2022 for the generations to come 😊
Elliptic says that DeFi continues to be the key target for exploits as compared to CeFi. DeFi represents 98.8% of the total losses, while CeFi represents 1.2% of the total losses.

[zasad@]

Decentralized exchange QuickSwap exploited for $220K, plans to close lending markets
https://www.theblock.co/post/179333/decentralized-exchange-quickswap-exploited-for-220k-plans-to-close-lending-markets

"QuickSwap DEX was exploited for $200,000.
The exploit used flash loans to attack a vulnerability with the Curve Oracle.
QuickSwap, a decentralized exchange on Polygon, was exploited for $220,000, according to the exchange."

[Daltonik]

The Team Finance DeFi protocol project lost ~ $15.8 million in assets due to a vulnerability in the token migration function, which the hacker managed to detect and use to carry out the attack, he needed only 1.76 ETH.
https://twitter.com/peckshield/status/1585587858978623491

Hacker Transactions:
https://etherscan.io/tx/0xb2e3ea72d353da43a2ac9a8f1670fd16463ab370e563b9b5b26119b2601277ce

[Hamza2424]

Dear the major hack or scams in defi are due to some reasons as let me explain one of the major reason. As you all know that in DeFi protocols and Apps the source codes are open source many of the scammer just copy code and make a few changes to create a new platform similar to previous one this happened with Dexs in early 2021 and 2022. It cause major scams and people gets trapped.