Cointime

Download App
iOS & Android

hacker

ALL From hacker

Hacker who attacked ZBexchange deposited $250,000 into Tornado Cash today

According to Cyvers Alerts monitoring, in August 2022, the exchange ZBexchange was attacked by hackers due to suspected private key leakage. Today, the hacker deposited $250,000 into Tornado Cash through address 0x26446. The hacker still holds 2,114 ETH (worth $4.8 million) at the same address mentioned above.

A hacker claims that he can access Binance and Coinbase user data through KodexGlobal

On February 5th, cybersecurity solution provider Hudson Rock disclosed that a hacker going by the name "Tamagami" claimed to have breached KodexGlobal, a secure network for communication between regulatory and law enforcement agencies, as well as a law enforcement request system for well-known tech companies such as Google, Meta, TikTok, and cryptocurrency projects such as Binance, Coinbase, Chainlink, Discord, and Fintech. The hacker is selling access to KodexGlobal accounts on breakachforums, allowing buyers to access user information from these companies. The hacker charges between 300 and 500 dollars per request for emergency data requests (EDR) on KodexGlobal when commissioned by a buyer, and promises that interested buyers can "access any TikTok account and obtain the desired data within 8 hours" for a payment of 500 dollars. Tamagami accepts any type of encrypted payment. The spokesperson for Binance stated that the investigation results from Hudson Rock do not necessarily represent damage to popular cryptocurrency exchange systems. The spokesperson stated: "Through a complete document process and continuous monitoring of any compromised accounts, we are still committed to protecting our user data from any form of unauthorized access."

Blockworks founder Yano’s Twitter account was hacked, users please be aware of the risks

Blockworks personnel @MikeIppolito_ posted on social media that the Twitter account of its founder Yano has been compromised by hackers. Users are advised to disregard all tweets and direct messages from the account and to be aware of the risks.

Paidun: DeFi protocol MIM_Spell was hacked and lost $6.49 million

According to PeckShield monitoring, DeFi protocol MIM_Spell was attacked by hackers, resulting in a loss of $6.49 million.

GoPlus: The blockchain gaming platform’s GMEE token contract was subject to unauthorized access, resulting in the theft of 600 million GMEE

GoPlus issued a security warning on social media stating that the GMEE TOKEN token contract on the chain game platform had been accessed without authorization, resulting in the theft of 600 million GMEE tokens, worth $7 million. The hacker has converted the tokens into ETH and MATIC.

The cross-chain protocol Socket was attacked and funds worth at least US$3.3 million were stolen.

According to PeckShield monitoring, cross-chain protocol Socket was attacked and at least $3.3 million worth of funds were stolen. Hackers used malicious routing to steal user funds from the SocketGateway contract.

Hack of SEC's Official Account on X Raises Concerns About X's Security

The recent hack of the U.S. Securities and Exchange Commission's official account on X has raised concerns about the security of Elon Musk's social media platform. However, X's safety team has confirmed that the account was compromised due to the SEC's failure to enable two-factor authentication, rather than any breach of X's systems. The hackers posted false news about the SEC's approval of all spot Bitcoin ETFs, causing massive volatility in the Bitcoin price and over $140 million in total liquidation in hours. The SEC is now working with law enforcement to investigate the matter, while some are blaming Elon Musk for the incident and the lack of security measures on the platform.

North Korea-Linked Hackers Stole $600 Million in Crypto Last Year, TRM Labs Report Finds

According to a report by TRM Labs, hackers affiliated with North Korea were responsible for a third of all crypto thefts and exploits in 2023, resulting in a total of $600 million in stolen funds. This brings North Korea's total earnings from crypto projects to nearly $3 billion over the past six years. However, this figure is about 30% lower than in 2022, with most of the stolen funds being taken in the last few months of 2023. The attacks continue to use social engineering to acquire private keys for projects, and the proceeds go towards the development of weapons of mass destruction, raising national security concerns.

Slow Mist: A total of 464 security incidents occurred in 2023, with losses reaching US$2.486 billion

SlowMist released a blockchain and anti-money laundering report for 2023. According to blockchain event records, a total of 464 security incidents occurred in 2023, resulting in a loss of up to 2.486 billion US dollars. Compared with 2022, the losses decreased by 34.31%. In 2022, there were 303 accidents with losses of about 3.777 billion US dollars. In 2023, DeFi became the most vulnerable area in the blockchain security field. In 282 incidents, DeFi accounted for 60.77% of the total violations, but the losses decreased to 773 million US dollars, a decrease of 62.73% compared to the 2.075 billion US dollars in losses in 183 incidents in 2022. 117 Rug Pulls cases have been reported, with losses exceeding 83 million US dollars. The Base ecosystem suffered the most severe blow, losing 32.5 million US dollars, followed by BSC, which lost 23.05 million US dollars.

Radiant Protocol on Arbitrum Suffers Flashloan Attack, Resulting in $4.5M Loss: In-Depth Analysis Reveals Exploit Details

On Jan-03–2024 UTC+8:00, the Radiant protocol on Arbitrum was under the flashloan attack. The hacker attacked the #Radiant protocol 3 times, resulting in a total loss of 1.9K $ETH(worth $4.5m). The root cause is the mathematical rounding issue in the `burn` function that is amplified and used, on a new $USDC market, which makes the hacker withdraw an extra $USDC. MetaTrust Labs conducted in-depth research and analysis on the exploit, revealing how the hacker exploits vulnerability.
Radiant Protocol on Arbitrum Suffers Flashloan Attack, Resulting in $4.5M Loss: In-Depth Analysis Reveals Exploit Details