Solana-Based Raydium Exchange Victim of 7-Figure Exploit

Dec 24, 2022

In brief⚡

The exploit appears to result from a trojan attack and a compromised private key for the account of the pool owner.
According to Raydium, a trojan allowed an attacker to compromise the private key of the pool owner's account.
After gaining control of the private key, the attacker could withdraw various assets from the pools.

Mgnr, a quantitative trading firm, has deleted all of its tweets and left some groups, leaving only 0.097 Ethereum in its wallet address.
On November 14, the address with the domain name mgnr.eth transferred 43.6 million USDC to Coinbase while also transferring 8 million USDC and 0.1 Ethereum to the Genesis Trading address.
The address with the domain name mgnr. eth transferred 43.6 million USDC to Coinbase on November 14, and at the same time, moved 8 million USDC and 0.1 Ethereum to the Genesis Trading address.

A scammer spent a month planning a con to stole fourteen Bored Ape NFTs from one person.
Scammer convinced the collector that they wanted to pay $13,000-$17,000 to licence a Bored Ape for use in animation by posing as a casting director at a real film production company, complete with a fake website, a fake partner company, and fake individuals pretending to have signed deals with the company.
After some back-and-forth, with legitimate-looking contracts and falsified emails purporting to be from the real company's real founding director, the NFT collector was asked to sign a contract using their crypto wallet via the fake company partner website that had been set up.
When the collector did so, the smart contract emptied the collector's wallet of its fourteen pricey Bored Ape NFTs before accepting the highest offers on each of the Bored Apes, netting 852.9 ETH.