2FA compromise led to $34M Crypto.com hack⚠️
Hashing Bits | Week-3
Events Under the Spotlight
Kingfund Finance rugged investors for - $141,000
KingFund Finance ($KING) on Binance Smart Chain, rugged investors for 300 wBNB.
The project dumped their tokens in the market and disabled their website and Twitter account.
BNBHeroes rug pulled investors
BNBHeroes, a P2E game on BSC, rugged investors and caused a sharp token price drop.
The project’s Twitter account is inactive, while the website is unavailable.
CrosschainFi exploited, total loss~ $879K
CrosschainFi is a DEX on Binance Smart Chain launched on 11th January 2022.
The platform stated that they were exploited due to the public exposure of a privileged function.
It resulted in a loss of ~$879K.
The initial funds to launch the attack were sent through Tornado Cash, followed by cashing out the stolen funds using Tornado Cash.
Cross-chain protocol Multichain bug gets exploited for $1.34 million
The cross-chain bridging solution, MultiChain (Previously AnySwap), stated that a “critical vulnerability was discovered affecting WETH, PERI, OMT, WBNB, MATIC, and AVAX”.
The vulnerability was later exploited, resulting in a loss of more than 450 ETH or $1.34 Million to the platform.
Crypto.com confirms 400 accounts were compromised in hack
Crypto.com reported they had received several complaints of unauthorised access to user accounts and withdrawals.
The centralised exchange booked a total loss of $34 Million, stealing from 400 user accounts.
Funds were washed through Tornado Cash.
Crypto Burger NFT Flash Loaned for - $770K
Crypto Burgers NFT suffered flash loan attacks with
$BURGwith a loss totalling $770K.The hacker exploited a vulnerability in the
$burgsmart contract that allows the burning of tokens from any account.The token price fell below 96% after the hack.
Float Capital suffered an Oracle manupulation
Float Capital is a low volatile cryptocurrency for Web3.
It suffered an oracle manipulation, where the protocol owned liquidity pool, Float Protocol Pool 90 was affected in the Rari Capital pool.
The team also revealed a postmortem, following the hack.
The hacker drained the liquidity pool to earn 350 ETH.
Frosties NFT rug pulled investors for - $1.3M
Frosties NFT, a newly launched collection of 8,888 NFTs, rug pulled and pocketed $1.3 Million from investors.
The value of the project dropped to almost zero overnight.
CityDAO suffered Discord server hack, total loss - $95,000
CityDAO, an experimental project in decentralised land ownership, suffered yet another Discord server hack.
The hacker took away 29.67 ETH or $95,000 from the community via a fake airdrop.
The attackers used a common practice of social engineering to compromise the server admin account of the CityDAO project.
To the Numerophiles out there 🔢
Showtime: NFT tickets take the stage in 2022, connecting artists and fans. - Source
More From the Editor’s Desk
On Tuesday, December 21st, 2021, two NFT projects fell victim to the same attack.
Just like various other projects in the NFT domain, the NFT collection Monkey Kingdom and in-game asset marketplace Fractal, both engaged heavily with their communities through Discord chat servers.
These hacks have underlined the threat posed by hackers to NFT projects and buyers.
Thus, we have come up with a comprehensive article on ‘Discord Hacks’ and how they can be averted with ‘Due Diligence’.
Word on the Block
Versus Series
Delegated Proof-of-Stake 🆚 Proof-of-Stake..!
Catch out the Key differences between various significant terminologies in the Blockchain.
