Posts

Showing posts with the label hack

Sui Network Rocked As Cetus Protocol Loses $223M In Massive Hack

Cetus Protocol, the biggest decentralized exchange (DEX) on the Sui network, was hacked on Thursday, losing about $223 million worth of SUI tokens. The hack targeted the SUI/USDC liquidity pool, wiping out nearly all liquidity on Cetus and bringing trading on the platform to a halt. The incident also caused a flash depegging of USDC on the Sui chain, where it was reported to be exchanging hands for a fraction of a cent. Liquidity in some pairs fell sharply, with some pools dropping as low as $143,000. Cetus(@CetusProtocol) on #SUI was hacked and lost more than $260M! The hacker is converting the stolen funds into $USDC and cross-chaining to #Ethereum to exchange for $ETH, with ~60M $USDC already cross-chained.https://t.co/b0uGu8icXrhttps://t.co/0BpKSaygmr pic.twitter.com/txfxLoImOd — Lookonchain (@lookonchain) May 22, 2025 The exploit caused all of the top 15 SUI-based tokens to plunge by over 75%. Cetus Protocol Team Confirms Breach The Cetus team confirmed the breach a...

Bybit Founder Confirms $1.4B Ethereum Hack

Image
In what is a concerning development for the cryptocurrency industry, Bybit has confirmed a $1.4 billion Ethereum hack. Indeed, both the cryptocurrency exchange founder, Ben Zhou, and the platform itself have confirmed the incident in a post to X (formerly Twitter). The hacker stole more than $1.4 billion in liquid-staked Ether and MetaETH (mETH), according to on-chain blockchain security analyst ZackXBT. Zhouh updated users, unveiling a Bybit ETH multisig cold wallet that had made the transfer to a warm wallet to steal the funds. However, he assured users, “All other cold wallets are secure.” JUST IN: Bybit founder confirms $1.4 billion $ETH hack. — Watcher.Guru (@WatcherGuru) February 21, 2025 Also Read: Argentina Bitcoin Adoption Surges as ByBit Card Debuts Bybit Faces $1.4 Billion Ethereum Hack, Confirms Founder The cryptocurrency market has taken massive strides forward this year. Indeed, 2025 has seen a host of nations embrace the asset class like never before. Yet, a k...

dYdX claimed 'no vulnerabilities,' was compromised two weeks later

Image
The popular ‘decentralized’ derivatives exchange, dYdX, has announced via its X (formerly Twitter) account that its v3 website was compromised. It has, however, moved to reassure users that this does not affect the current v4. The dydx.exchange website appears to have been hosted on Squarespace, according to its registration. Almost two weeks ago, several other crypto products, including Compound Finance and Celer Network announced that their frontends had been compromised. Both of these sites also relied on Squarespace for domain registration services. We just learned that dYdX v3 website (dYdX . exchange) has been compromised. Please do not visit the website or click any links until further notice. An update will be provided when available. This message does not relate to dYdX v4. — dYdX (@dYdX) July 23, 2024 When these other products were compromised , the firm took to X to note that “ no vulnerabilities or security issues have been detected at this ti...

Is CertiK running a BS bug bounty program?

CertiK, a cryptocurrency security auditing firm that was recently embroiled in a dispute with Kraken after it hacked the exchange, has now been accused of running a ‘bug bounty’ program that was collecting vulnerabilities for various platforms rather than having security researchers submit those vulnerabilities directly to businesses.  Today I was contacted by OpenBounty (@ShentuChain) to add their platform to Web3 Bug Bounty alerts. Never heard about them before so I decided to investigate as it seemed a bit sus 1/6 — h0wl (@h0wlu) June 25, 2024 The accusations center around ‘OpenBounty,’ operated by Shentu Chain. Shentu Chain used to be known as ‘CertiK Chain,’ which was operated by the CertiK Foundation. Archived versions of the CertiK Foundation website make it clear that it was founded by Fonghui Gu and Zhong Shao, both of whom are still listed as co-founders of CertiK. Besides these obvious connections between the entities, others ha...

Fantom Foundation hit by security breach, $657k stolen across networks

Image
The Fantom Foundation has reportedly suffered a significant security breach due to a zero-day exploit on Chrome, leading to the theft of at least $657,000 across its blockchain networks. Fantom Foundation reportedly suffered a zero-day exploit, leading to hackers draining over 35 wallets from the platform’s Fantom and Ethereum networks . The breach was first disclosed by users in a Fantom Foundation Telegram group.  According to the Telegram post, the breach resulted from a zero-day exploit on Google Chrome. Several users also confirmed the story on X. However, most of the foundation’s assets are stored in cold wallets and are not affected. Fantom Foundation allegedly drained on one of their wallets via a Chrome zero day pic.twitter.com/PhBO2TtsAt — Spreek (@spreekaway) October 17, 2023 Leading blockchain security platform, CertiK also confirmed the breach has resulted in a loss of at least $657,000 so far across both Fantom and Ethereum. During the time ...