Hackers stole ~$99.3 million across over 36 attacks in December. The Cross-chain #OrbitBridge suffered an $81.5 million exploit on New Year’s Eve, marking it as the 9th top hack targeting a cross-chain bridge in the last 3 years

#FTX/#Alameda-labeled addresses have transferred a total of ~$8.05M worth of cryptos out, including 10M $GM (~$2.6M), 407K $UNI ($2.4M), 5.23M $SYN (~$2.27M), 77.76B $SHIB ($642.4K) and 139.7K $USDD (to #Gateio) within the last 4 hours

#FlorenceFinance fell victim to a #AddressPoisoning scam, resulting in a loss of ~$1.45M $USDC. Intended address: 0xB087cfa70498175a1579104a1E1240Bd947f5870 Phishing address: 0xB087269DE7ba93d0Db2e12ff164D60F0b3675870

@VelodromeFi has reported that its frontend has been compromised as well. Please do *NOT* interact with #VelodromeFi for the time being.

Date: 2:16 PM · Nov 29, 2023

Likes: 10

id: 1729783815575679056

@KyberNetwork exploiter-labeled address has transferred 1,000 $WETH ($2.06M) to 0x84e6...adb4 on #Arbitrum. The address 0x84e6...adb4 previously interacted with Indexed Finance Exploiter on #Ethereum ~705 days ago

The @raft_fi hack leads to the mint of unbacked ~$6.7m stablecoin R. Our analysis shows the hack takes advantage of round issue and donation to (1) manipulate the collateral token's index rate of rcbETH-c to borrow/mint $6.7m R and (2) mint extra rcbETH-c so that the donation can be fully redeemed back. Here is the related tx: https://etherscan.io/tx/0xfeedbf51b4e2338e38171f6e19501327294ab1907ab44cfd2d7e7336c975ace7

Hi @Poloniex, you may want to take a look: @justinsuntron

#MEV An unknown MEV bot was exploited (with $2m loss) to make multiple large swaps in #curve pools, causing arb with simple reverse swaps. https://etherscan.io/tx/0xbc08860cd0a08289c41033bdc84b2bb2b0c54a51ceae59620ed9904384287a38

FTX-labeled address transferred ~309.2K $SOL (~$9.9M) out. Part of them (~244K $SOL) has been sent to #Binance

We have seen reports that Trezor users have been receiving phishing emails. The emails have been urging users to update their Trezor. Email links to a malicious site.

@MaestroBots router contract suffered an attack resulting in a loss of ~$500k. The attacker exploited the lack of check on calldata in the `0x9239' function. Approved assets from multiple victims were transferred to the attacker.

@MaestroBots router contract has suffered an attack resulting in a loss of ～$500K. The attacker exploited the lack of check on calldata input in router implementation's '0x9239()' function and transferred approved assets from over 100 victims to the attack contract.

Latest Hacks

>_ Web3Sec

Services

Learn

Resources

Jobs