Justin Sun's crypto exchange Poloniex seemingly hit by hack for over $100 million

11/11/23
Launched in January 2014 Poloniex "appears to have suffered from a major security hack affecting more than $100 million in crypto assets."

How To Avoid MetaMask Infinite Approval Exploits

29/10/23
Information about using Ethereum smart contracts and granting too much privileges to it.

Alchemix reports return of all stolen funds from Curve pools

06/08/23
Curve is a major DEX and this hack can destroy it. Luckily hacker return all money. This was about technology bug in Vyper. Vyper is a Python like programming language alternative to Solidity for writing EVM smart contracts. Bytecode for Vyper contracts is created during compilation and can be run on the Ethereum Virtual Machine (EVM).

"A Truly Difficult Time": Algorand Foundation Releases Hack Statement

21/03/23
The $9.2 million hack comprised of 19.5 million ALGO and 3.5 million USDC between 19 and 21 February 2023. "This has been a truly difficult time for the Algorand community. The security breach has impacted a number of users of the MyAlgo Wallet, a third-party wallet by Rand Labs,"

Euler Finance hacked for over $195M in a flash loan attack

14/03/23
DeFi smartcontract hack. "Euler Finance was exploited in a flash loan attack that drained hundreds of millions of decentralized stablecoins and synthetic ERC-20 tokens." "There appears to be a bug in one of the Euler smart contracts, where it doesnâ??t check for the health factor when executing the donateToReservers() function. "

MEV bot earns $1M but loses everything to a hacker an hour later

03/11/22
"An MEV bot gained massive profits worth $1 million by seizing an arbitrage opportunity. However, it was tricked into authorizing a malicious transaction that drained the funds."

Crypto exchange Deribit loses $28 million in hack, halts withdrawals

02/11/22
Crypto derivatives exchange Deribit has lost $28 million in a hot wallet hack. "Deribit said it â??remains in a financially sound position and ongoing operations will not be impactedâ?? by the hack.""Founded in 2016, Deribit caters mainly to institutional investors."

Binance's Crypto Dips on Heels of Confirmed Exploit on BNB Chain

10/10/22
"The hacker successfully extracted around $100 million before being shut down". "The simple fact that the BNB Chain could be halted in this manner calls into question the decentralization of the project, which has only 26 active validators."

$160M stolen from crypto market maker Wintermute

21/09/22
"Wintermute, a cryptocurrency market maker based in the United Kingdom, became the latest victim of decentralized finance (DeFi) hacks, losing approximately $160 million"

Optimism Exploiter Returns 90% Of Stolen Tokens

15/06/22
"On June 8, the Foundation had disclosed that an attacker had drained a wallet containing 20M OP, the governance tokens of Ethereum Layer 2 scaling solution Optimism. "

BAYC Discord Compromised, NFTs Totaling 200 ETH Stolen

06/06/22
"A malicious actor has made off with 200 ether ($359,000) worth of Bored Ape NFTs after the Discord server belonging to the project was compromised on Saturday.". " The attacker was able to breach the security of the Discord account belonging to BAYC's project manager Boris Vagner, according to on-chain analyst and Twitter user @NFTherder who first sounded the alarm bells."

Dozens of Pricey NFTs Stolen After BAYC Instagram Hack

27/04/22
"In a tweet, BAYC said a hacker posted a fake link to a copycat website, along with a false airdrop. The airdrop prompted users to sign a so-called â??safeTransferFromâ?? transaction, which transferred the NFTs to the hackerâ??s wallet."

Beanstalk Farms loses $182M in DeFi governance exploit

18/04/22
"The stablecoin protocol saw its own governance proposal system exploited enabling the malicious actors to extract all of its $182 million in collateral." Flash loans and get it all. To progressive gov. solution.

Hardware Wallet Provider Trezor Targeted in Phishing Attack

10/04/22
Phishing domain was used to sent false newsletter form â??noreply@trezor.us."A malicious actor pretending to be Trezor sent a false email requesting victims to update their software and change their wallet PIN"

Axie Infinity Developers 'Made Some Trade-offs' That Enabled $625M Ronin Breach

10/04/22
This is an example of how decentralisation of nodes is important. 'Sky Mavis' Ronin chain currently consists of 9 validator nodes. In order to recognize a Deposit event or a Withdrawal event, five out of the nine validator signatures are needed,'per the breach' announcement. Among the security improvements, Sky Mavis will increase the validator group to 21 validators within the next three months, which will be split among various stakeholders including partners, community members and long-term allies."

Wormhole is attacked and 120k wETH is stolen

29/03/22
The attack on Wormhole was one the biggest attack on popular crypto blockchain bridge. "Upon research, it was found out that 80,000 ETH were transferred from Wormhole. Also, another 40,000 ETH were sold by the hackers on Solana. This meant that almost $324 million were sucked out of the platform."

Axie Infinity's Ronin bridge hacked for over $600M

29/03/22
Big hack on popular Axie Crypto Game, Ronin coin swap service was attacked and almost 0.5bln USD was stolen."According to Axie Infinity's official Discord and Ronin Network's official Twitter thread, along with its Substack page, the Ronin bridge and Katana Dex have been halted after suffering an exploit for 173,600 Ethereum (ETH) and 25.5 million USD Coin (USDC), worth a combined $612 million at Tuesday's prices."

Security Advisory: Mobile Phones

14/07/21
If are using mobile to secure something in net now, read this twice.