Cointime

Download App
iOS & Android

YIEDL: Hackers hacked the new Y-Bull vault on BSC, worth about $300,000

YIEDL has released an update on the hacker attack on the X platform. YIEDL stated that:

a. The hacker attacked the new Y-Bull gold vault on Bsc, worth about $300,000;

b. All SCs have undergone extensive third-party auditing and testing before release, but the attacker exploited a vulnerability in the BSC-integrated SC, which allowed redemption of small amounts of funds. This has been done multiple times through custom malicious SCs. Unfortunately, this vulnerability was not discovered during the auditing phase;

c. We are tracking the flow of stolen funds to the destination wallet and are looking for partial/full recovery solutions;

d. The incident has been reported to the Singapore authorities;

e. One of the attacker's wallets received funds from an address starting with 0x975d9B, and multiple security teams have emphasized to us that this address belongs to the ChangeNow cryptocurrency exchange. We have contacted them to obtain detailed information about the attacker.

Yesterday, according to PeckShield monitoring, YIEDL (an AI-driven Vaults project) was attacked, resulting in a loss of about $160,000.

Comments

All Comments

Recommended for you

  • The address that defrauded 1,155 wBTC has returned more than 96% of the funds to the victims

    Blockchain data shows that the address poisoning attacker lured users to send 1,155 Wrapped Bitcoins (wBTC) (valued at $68 million at the time) to them. The attacker has returned almost all of the stolen funds. These funds were exchanged for Ethereum (ETH) during the attacker's holding period, and the price of ETH has since fallen. However, the attacker returned about 22,960.07 ETH, worth about $65.7 million, which accounts for over 96% of the initial stolen funds in terms of US dollar value.
  • Ethereum's Evolving Ecosystem - Staking, DeFi, and Derivative Markets

    The third part of our Glassnode Spotlights series, presenting the most interesting and actionable insights from the Coinbase x Glassnode Q2 Guide to Crypto Markets, explores Ethereum's Evolving Ecosystem - Staking, DeFi, and Derivative Markets.
  • Bitcoin’s Price Dynamics: Federal Reserve Policies and Economic Shifts in Focus

    This year, the factors influencing Bitcoin’s price shifted away from the interest rate narrative when spot Bitcoin ETFs were approved in the US in January. Since then, Bitcoin’s prices have re-aligned with market expectations on interest rates, now that ETF flows have diminished. The Federal Reserve is confronted with a challenging dilemma: it needs to control persistent inflation while also supporting a weakening U.S. economy. Over the long term, this predicament could turn out to be advantageous for Bitcoin.
  • Exploring Consensus With Parallel Proposals: The Difference Between PBFT and BBCA-Chain

    Recent works [BBCA-Chain, Motorway, Cordial-Miners, Shoal, Mysticeti-C, Sailfish] debunk the belief that Block-DAG BFT Consensus protocols have to pay significant latency to achieve throughput scalability. They provide alternative ways for leveraging parallel transaction dissemination.
  • TrumpAI tokens on Ethereum have been RUG

    PeckShield has monitored that the TrumpAI token on the Ethereum blockchain has fallen by 100%. An address starting with 0x935A sold 5,000,000,000,000,000,000,000 TrumpAI tokens, which is about 26.57 WETH (approximately $80,000). Note: rugpull tokens have the same name as legitimate tokens.
  • WOOFi attacker address has transferred 100 ETH to Tornado cash

    PeckShield monitoring shows that the address marked by the WOOFi attacker has transferred 100 ETH to Tornado cash. The WOOFi attacker has already transferred 2200 ETH (worth about $6.5 million) to Tornado cash.
  • The Base ecosystem Bloom project said it has recovered 90% of the funds stolen in the attack

    On May 10th, Bloom, a decentralized derivatives exchange on the X platform, announced that they have recovered $486,000 (minus 10% for bug bounties) out of the total funds utilized ($540,000). All of these funds will be redistributed to limited partners. 10% of the bug bounty has been agreed upon in exchange for not pressing charges against those who exploited the bug. A compensation plan for limited partners affected by the bug will be completed within the next 24-48 hours. Funds are safe and there is currently no need to revoke contract access.
  • Multidimensional gas pricing

    In Ethereum, resources were up until recently limited, and priced, using a single resource called "gas". Gas is a measure of the amount of "computational effort" needed to process a given transaction or block. Gas merges together multiple types of "effort", most notably:
  • AMA: AO and Artificial Intelligence

    The article is divided into two sections: the main dialogue between the host and Sam, and the Q&A session where community users ask questions about AO.
  • $HALO,World!

    Everything you want to know about the $HALO token