attack
Ethereum (ETH) Partners with Immunefi for Protocol Security Attackathon
Ethereum and Immunefi launch a four-week Attackathon to enhance protocol security through a large-scale crowdsourced audit competition.
UN Investigation Reveals DPRK's $3 Billion Crypto Cyberattack Scheme
The United Nations is probing DPRK-linked hacking groups for orchestrating cyberattacks on cryptocurrency firms, amassing $3 billion over six years to fund WMD development. These cybercrimes, targeting 58 companies, underscore a sophisticated operation defying international sanctions.
SlowMist Reports Surge in Diverse Crypto Security Incidents for the Week of September 17-23, 2023
SlowMist, a cybersecurity firm specializing in blockchain, released its weekly security report for the week of September 17-23, 2023. The report highlights a total of seven security incidents with an estimated loss of around $380,600. The week saw a significant rise in phishing attacks and rug pull tactics, as well as the emergence of diverse attack methods like DNS hijacking and contract vulnerabilities.
Euler Finance suffers $197M DeFi hack
Decentralized finance (DeFi) protocol Euler Finance lost nearly $197 million in a flash loan attack on March 13, impacting more than 11 other DeFi protocols. The vulnerability remained on-chain for eight months despite a $1 million bug bounty in place. Euler Finance disabled the vulnerable etoken module and vulnerable donation function, and has reached out to security firms and the ETH security community to help with the investigation and recover the stolen funds.
DeFi Suffers $21M in Losses from Exploits
Decentralized finance (DeFi) platforms lost at least $21 million in February due to a series of exploits including flash loan reentrancy attacks, price oracle attacks, and other hacks across seven protocols. Noteworthy incidents included the reentrancy attacks on Platypus Finance and dForce network, the price oracle attack on BonqDAO, and the smart contract exploit on Hope Finance. These incidents follow a report by Chainalysis revealing that DeFi platforms lost $3.1 billion to hacks in 2022.
US District Judge Rules in Favor of Custodial Arrangement for bZx DAO Members
A US district judge has ruled that bZx DAO transactions are custodial due to the ability for developers to upgrade a smart contract where the key is held by a single developer, as highlighted in a class-action lawsuit against bZx DAO and others. This may impact DeFi platforms that use multisigs and require them to obtain custody licenses to comply with the law.
Unknown Sources Target Crypto Investors with Malicious Computer Programs
Since December 2022, MortalKombat ransomware and Laplas Clipper malware threats have been searching the Internet for unsuspecting cryptocurrency investors.
Crypto Miner Sphere 3D Sues Partner over Alleged Bitcoin Spoofing Attack
Sphere 3D, a crypto miner, has filed a lawsuit against Gryphon Digital Mining, its partner, after an alleged spoofing attack led to the irregular transfer of Bitcoin. Gryphon CEO allegedly wired BTC to a fraudster posing as Sphere 3D's CFO. Sphere 3D accuses Gryphon of violating their contractual duties and putting the company's assets at significant risk.
SafeMoon LP Compromised
SafeMoon, a cryptocurrency project endorsed by celebrities, announced its liquidity pool was attacked, but gave no further details. Experts suggest a recent software upgrade may be to blame for the vulnerability that allowed an attacker to remove SafeMoon tokens and sell them at an inflated price.
dYdX Utilizes $9M Insurance Fund Following Alleged Targeted Attack on YFI
dYdX deployed $9 million from v3 insurance fund to cover YFI market liquidations, suspecting targeted attack and market manipulation. No user funds affected, insurance fund remains at $13.5 million.
US Treasury Targets Hamas Financial Networks Post-Israel Attack
In a strategic move following the recent terrorist attack on Israel, the US Treasury designated ten key individuals and entities affiliated with Hamas, targeting their financial networks across several countries. This action accentuates the broader US initiative to choke off Hamas’s financial resources, while spotlighting the emerging challenges posed by virtual currencies in terror financing.
North Korea's Cyber Onslaught on Cryptocurrency: A $3 Billion Digital Heist
North Korea has escalated cyber attacks on cryptocurrency since 2017, stealing over $3 billion and stealing $1.7 billion in 2022, posing a serious threat to the country's economy and military budget.
DeFi Platform Raft Compromised, Loses $3.3 Million in Ether
Raft DeFi platform hacked, loses $3.3M in ETH. Attacker burns most stolen ETH, faces net loss.
Hacker moves stolen funds after bounty launch
The hacker who stole $196 million from Euler Finance has transferred $1.65 million through Tornado Cash, after a $1 million bounty was launched. Victims pleaded for return of funds, but the hacker's move to a crypto mixer suggests they may not be swayed. On-chain data shows the stolen funds consisted of DAI, USDC, staked ETH and WBTC.
Radiant Capital Suffers $4.5M Flash Loan Attack
Radiant Capital was hit by a $4.5M flash loan attack due to a known codebase rounding issue, leading to a temporary pause in their Arbitrum market operations.
Cryptocurrency Phishing Attacks Rise by 40% Year-on-Year in 2022
Kaspersky, a Russian cybersecurity and anti-virus provider, has reported a 40% year-on-year increase in cryptocurrency phishing attacks in 2022. The attacks involve reaching out to investors through fake websites and communication channels that mimic official companies, prompting users to share personal information such as private keys. Attackers are evolving their strategies to lure unwary crypto investors. Recently, hardware cryptocurrency wallet provider Trezor warned against attempts to steal users' crypto through fake Trezor sites. In a survey, one out of seven respondents admitted to being affected by cryptocurrency phishing.
Platypus Recovers 90% of Stolen Funds from Recent Exploit
Platypus DeFi protocol has recovered 90% of the funds stolen in the recent 12 October 2023 exploit, reducing the net loss to about 18,000 AVAX. The protocol acknowledged the community's support in swiftly resolving the crisis and is making arrangements for the withdrawal of liquidity providers. Amidst ongoing investigations and enhanced security measures, Platypus continues to work on a compensation plan for affected users from previous attacks.
New Bitcoin Lightning Network Vulnerability Exposed: The Replacement Cycling Attack
A new vulnerability termed as "replacement cycling attack" on the Lightning Network has been unveiled by a developer known as mononaut. The attack manipulates the transaction mechanism of the network, potentially causing financial loss to users. This revelation has led to the resignation of security researcher Antoine Riard from the Lightning Network development team. Despite the challenges, the network's locked-in value stands at $159.5 million, indicating its growing popularity since 2018.
Ethereum Foundation Suffered from MEV Bot Attack in Eth Selling
The Ethereum Foundation suffered a Sandwich attack by an MEV Bot during a 1.7k ETH transaction on Uniswap V3, resulting in a $9,101 loss. The incident spotlights the rising menace of MEV exploits and underlines the necessity for enhanced security protocols in blockchain transactions.
Friend.Tech Boosts Security with CoolWallet on Base Chain
Friend.tech, a decentralized social network on Base's Ethereum layer-2 chain, has seen rapid growth but also faces security risks from phishing attacks. To address this, CoolWallet has launched a Web3 Guardian competition to promote its Web3 SmartScan feature, which screens transactions for malicious behavior.
Euler Finance Suffers Flash Loan Attack, Loses Millions in Multiple Cryptocurrencies
Euler Finance, an Ethereum-based noncustodial lending protocol, suffered a flash loan attack on March 13, resulting in the loss of millions in Dai, USD Coin, staked Ether, and wrapped Bitcoin. The attacker stole nearly $196 million in multiple transactions, making it the largest hack of 2023. On-chain data indicates that the attack is related to a deflation attack that occurred one month ago, and the attacker used a multichain bridge to transfer funds from the Binance Smart Chain to Ethereum.
Bitfinex Tackles Phishing Incident: No Customer Funds Affected
Bitfinex has resolved a phishing incident causing partial customer information exposure, confirming no loss of funds or sensitive data compromise, and ensuring ongoing security measures.
Binance CEO CZ Alerts Users of Phishing Attacks Following Kroll Data Leak
Binance CEO CZ warns FTX, BlockFi, and Genesis of new phishing attacks linked to the Kroll data leak, citing an employee SIM swap. He emphasizes cybersecurity awareness and user vigilance in the cryptocurrency sector.
Sphere 3D Sues Gryphon Digital Mining Over Alleged Spoofing Attack
Sphere 3D has filed a lawsuit against Gryphon Digital Mining over an alleged spoofing attack that resulted in the irregular transfer of Bitcoin. Gryphon's CEO allegedly wired 18 BTC in January to a fraudster posing as Sphere 3D's chief financial officer through a spoofing attack.
Fantom Foundation Wallets Compromised in Suspected Chrome Exploit
Fantom Foundation's wallets were reportedly compromised with a suspected Google Chrome zero-day exploit. While the breach resulted in a loss of $550K from the Foundation's funds, over 99% of their assets remain secure. The attacker demonstrated expertise in the DeFi ecosystem, with total gains estimated at $6.7 million.
Euler Finance Hacker Returns Stolen Funds
Euler Finance has recovered most of the funds stolen in a flash loan attack that drained millions of dollars from various tokens, including Dai and USDC. After negotiating with the hacker, Euler Finance convinced the individual to return the majority of the stolen funds, resulting in the recovery of 12 million DAI and 10,580 ETH. The crypto community has applauded Euler Finance's efforts to recover the funds and restore investor confidence.
Euler Finance Audited 10 Times Before $196 Million Attack
Euler Finance, an Ethereum-based lending protocol, underwent 10 audits from six different firms in two years before it suffered a $196 million flash loan attack. Despite this, the audits deemed the platform "nothing higher than low risk" with "no outstanding issues." The attack prompted Euler to launch a $1 million bounty for information leading to the hacker's arrest, only for them to move the funds through crypto mixer Tornado Cash.
3 Ways Blockchain is Transforming Cybersecurity
Blockchain technology ensures that data is stored in immutable distributed ledgers and it can be instrumental in enhancing cybersecurity by averting DDoS attacks, authenticating downloads, and offering consensus mechanisms.
Unraveling ChatGPT Jailbreaks: A Deep Dive into Tactics and Their Far-Reaching Impacts
Exploring the intricacies of ChatGPT jailbreak strategies, this paper delves into the emerging vulnerabilities and the advanced methodologies developed to evaluate their effectiveness.
How Jailbreak Attacks Compromise ChatGPT and AI Models' Security
Recent studies reveal the vulnerabilities of large language models like GPT-4 to jailbreak attacks. Innovative defense strategies, such as self-reminders, are being developed to mitigate these risks, underscoring the need for enhanced AI security and ethical considerations.
AI Transforming Cybersecurity Landscape: Key Challenges and Solutions
AI is transforming the cybersecurity landscape in 2024 with advanced threat detection, zero-trust architecture, and generative AI, while facing challenges like adversarial AI and regulatory complexities.
Hackers Demand $1 Million in Bitcoin Ransom After Hacking Computer Systems of Insurance Firm
Israeli’s largest insurance company fell victim to hackers this week and must pay huge amounts of funds in cryptocurrency to regain access to its data.
Jim Cramer Sold Most of His Bitcoin Holdings but Willing to Buy Again If Prices Fall to Near $10,000
CNBC host Jim Cramer said he is willing to purchase buy Bitcoin again if its price fall to near $100,000, he has revealed has sold nearly all of his Bitcoin holdings due to recent cyberattacks and China’s crackow on crypto.
US Sanctions Crypto Addresses of Russian Hackers Accused of Running Presidential Election Interference
The US has released a sanctions list of Russians and their crypto addresses, under allegations that they have been interfering with the presidential election.
Russia’s E-Voting Blockchain Platform Attacked
Russia’s blockchain e-voting platform for Vladimir Putin’s proposed Constitutional amendments reportedly suffered a node attack last weekend. The proposal is passed will allow Putin to serve as President until 2036.
Why Did the University of California San Francisco Pay Hackers $1.4 Million in Bitcoin?
The University of California, San Francisco (UCSF), has recently paid criminal hackers $1.14 million to resolve a ransomware attack. The university reportedly paid the amount in 116.4 Bitcoins worth over $1 million.
Axie Infinity's Home Ronin Network Suffers Over $600m in another DeFi Hack
The Ronin Network has suffered what is being tagged as the largest hack in the history of Decentralized Finance (DeFi) which funds in excess of $625 million carted away by the hackers.
OpenSea Confirms Under Phishing Attack, after Urging Users to Migrate NFTs New Addresses
Some of the users from OpenSea have been targeted explicitly through a phishing attack, resulting in NFTs lost from the NFT marketplace.
Jack Daniel’s Parent Company Brown-Forman Targeted for Ransomware by Notorious REvil
Brown-Forman, Jack Daniel’s parent company and a giant powerhouse in the alcoholic industry, recently suffered a ransomware data breach originating from REvil.
Ransomware Hackers Hunt for Bitcoin by Targeting Call of Duty: Warzone
Ransomware hackers have raided Call of Duty: Warzone player accounts and demanded Bitcoin payments in exchange for releasing the retained data.
About 6,000 Users Falls Trap as Victims under Phishing Attack: Coinbase
The Nasdaq-listed trading platform, Coinbase, says about 6,000 of its users were suffering as victims of a phishing attack that saw user's balances cleared.
Hackers Hungry for Bitcoin and Ether Target Indian Prime Minister Narendra Modi
Bitcoin and cryptocurrency hackers seized the social media account of India Prime Minister Narendra Modi today, in an effort to secure Bitcoin and Ether funds.
Australian Female Hacker Sentenced to 2 Years of Prison for $400K Ripple (XRP) Crypto Heist
Australia recorded one of its first cases of cryptocurrency theft recently.
TOR Network Vulnerability May Have Facilitated Dark Web Bitcoin Theft
According to a cybersecurity researcher, Bitcoin thieves and hackers have controlled more exit relays on the Tor network this year than in the past five, raising serious cybersecurity concerns that experts are looking to fix.
Lazarus Group Hacks for Crypto via LinkedIn Blockchain Job Posting
A hacking operation that is allegedly backed by North Korea has been reported to be targeting blockchain and cryptocurrency employees through LinkedIn.
Ransomware Attacks Target English Football League, Data Withheld for $3.8 Million Bitcoin
UK government report reveals cybercriminals are targeting English Football Clubs with ransomware attacks.
US Files Lawsuit to Recover Cryptocurrency Accounts Linked to North Korean Hacking Operation
The US Department of Justice has filed a suit against North Korean state-sponsored cyber hackers for allegedly perpetrating two major cryptocurrency heists.
Darknet Marketplace Empire Alleged to Have Exit Scammed with $30 Million Worth of Bitcoin
Darknet digital marketplace Empire Market appears to have exit scammed and made off with a hefty profit of 2,638 Bitcoin (BTC).
Bitcoin SV Network Suffered a Large-Scale 51% Anonymous Attack
Cryptocurrency data analyst CoinMetrics found that the Bitcoin SV network suffered a 51% attack anonymously through its regular monitoring tool FARUM on Tuesday.
Darknet Empire Offline for Days Has Users Fearing DDoS Attack and Looming Scam
A popular darknet marketplace, Empire Market, has been reported to be offline for over 48 hours, making website users fretful as to the cause behind it.
Over 50% Crypto Investors Backup Security Keys by Paper Wallets, Threatening its Vulnerability
New research by Unstoppable Domains, Efani, and NGRAVE found that more than half of crypto investors at 54% store their security keys on a paper wallet amid intensified cyber attacks.
Follow up: Almost 300,000 Addresses Hit in Binance Dusting Attack Launched Against Litecoin
Cryptocurrency exchange giant Binance alleged that a dusting attack had been launched on Litecoin (LTC). Being the fourth-largest altcoin, this had gained substantial attention amongst cryptocurrency proponents.
Ransomware Attack Directed Towards University of California Generated 118 Bitcoin
The University of California, San Francisco’s plans to further COVID-19 vaccine research were disrupted by a ransomware attack on the school’s servers.
Ethereum Calls On Hackers to Attack Ethereum 2.0 in Exchange for Bug Bounty
With Ethereum's plans to launch its 2.0 protocol network, the open-source platform has also decided to tweak its blockchain project to perfection by calling all hackers and challenging them to break into two Ethereum 2.0 attack networks.
DeFi's Yearn.Finance Protocol Suffers $2.8 Million Flash Loan Attack
Yearn.Finance decentralized finance protocol suffered a $2.8 million loss after a flash loan attack, a scheme frequently seen in the fast-rising DeFi sector.
Elon Musk Confirms Russian Bitcoin Ransomware Attack Targeting Tesla, FBI to the Rescue
Elon Musk confirmed that Tesla was recently targeted in a ransomware attack set to extort $1 million in Bitcoin from the car manufacturing giant.
WallStreetBets and Telegram Group Plan Coordinated Buying Attack on Ripple's XRP For February
WallStreetBets (WSB) along with a Telegram group are apparently planning a new coordinated attack on XRP which is set to be executed around 8:20EST.
Bitcoin Subreddit Surges as Hedge Funds Short BTC, A Coordinated Crypto Buying Attack?
Will Bitcoin be the next target of a coordinated buying attack as new data reveals Bitcoin subreddit's astronomical growth as well as institutional shorts on the cryptocurrency?
Twitter Says Bitcoin Hack Originated From Phone Phishing Attack
On Thursday, Twitter provided an update addressing the massive Bitcoin hack that overtook its platform earlier this month.
Twitter Massive Hack Attack Traced Back to Crypto Wallet Using BitPay and Coinbase
In the massive Bitcoin scheme that happened earlier this week, reputed coin exchanges such as Binance, Gemini, and Coinbase were targeted by crypto scammers, and officials have been hard at work investigating the digital trail that may lead back to the crypto scammers.
Ransomware Group Demands $4M in Bitcoin from Argentina, Border Activity Halted for 4 Hours
A Bitcoin ransomware attack was directed towards Argentina’s immigration agency, halting border crossing temporarily.
DeFi Protocol Harvest Finance Put Out $100K Bounty After $24M Attack, FARM Token Crashes
Harvest Finance is taking the offensive against an alleged attacker who exploited the DeFi protocols liquidity pools—putting a $100K bounty on the hacker.
Telecom Argentina Hit By Ransomware attack: Hackers Demand $7.5 Million Monero
Cyber attackers are demanding Monero ransom worth $7.5 million after taking control of Telecom Argentina’s internal network.