Altcoin News Official Today TheBitTimes.com

The exploiter behind the $46 million KyberSwap hack says they plan to outline a treaty for the potential return of funds on Nov. 30, but not if threats and hostilities from execs keep up. The exploiter behind the $46 million crypto theft against KyberSwap has demanded its execs and tokenholders ease up on the hostilities, threatening to push out negotiations until everyone is “more civil.” In an on -chain message addressed to KyberSwap executives, tokenholders and liquidity providers on Nov. 28, the exploiter said they plan to release a statement around a potential treaty with KyberSwap on Nov. 30 — but won’t do it if hostilities continue. “I said I was willing to negotiate. In return, I have received (mostly) threats, deadlines, and general unfriendliness from the executive team,” they said. “Under the assumption that I am treated with further hostility, we can reschedule for a later date, when we all feel more civil,” they warned. The @KyberNetwork exploiter sent the team another ...

The incident affected the greater HTX, Tron, and BitTorent ecosystem. HTX, formerly Huobi Global, suffered an estimated loss of $13.6 million as part of the $86.6 million HECO Chain bridge exploit on Nov. 22.  According to a report by blockchain security firm Cyvers, the losses stem from three compromised hot wallet s with users and exchange assets swapped for Ether and distributed to various Ethereum addresses thereafter. Among other coins and tokens, Cyvers says that 1,240 Ether (ETH), 7.3 million Tether (USDT), 1.78 million USD Coin (USDC), and 62,200 Chainlink (LINK) were drained during the attack.  Justin Sun, de-facto owner of HTX and founder of Tron and BitTorrent, both related entities, stated shortly after the exploit that "HTX Will Fully Compensate for HTX's hot wallet Losses. Deposits and Withdrawals Temporarily Suspended. All Funds in HTX Are Secure, and the Community Can Rest Assured." Earlier in the day, the HECO Chain bridge, a cross-chain bridge created...

In the aftermath of Fantom’s $550,000 hack in October, a security researcher found that the attacker could have stolen as much as $170 million. The Fantom Foundation, a nonprofit organization developing the Fantom blockchain platform, has eliminated a significant vulnerability after a $550,000 hack in October. On Oct. 17, the Fantom Foundation suffered a hot wallet hack, with an unknown attacker drain ing 1% of Fantom Foundation’s funds. The foundation subsequently stopped using some of the affected wallets, reassigning them to a Fantom employee, making it a “targeted attack.” Following the incident, an unnamed security researcher found an additional potential risk associated with the hack and alerted the Fantom Foundation, according to a blog post on Nov. 20. The vulnerability was associated with a dormant admin token for Fantom’s ERC-20 FTM contract, which could potentially allow the attacker the ability to mint a portion of Fantom (FTM) for themselves on Ethereum. According to the ...

The Estonia-based firm noted that only one plaintiff in the class action lawsuit is actually based in Colorado where the suit was filed. The company behind Atomic Wallet has asked a United States court to dismiss a class action suit seeking damages from a $100 million hack arguing the claims should’ve been filed in Estonia where it's based. In a Nov. 16 dismissal motion in a Colorado District Court the Estonian firm argued it has “no U.S. ties” and its end-user license agreement required all litigation against it be filed in its home country of Estonia. Atomic also argued that only one user in Colorado was allegedly affected — which wasn The firm also claimed the 5,500 allegedly affected Atomic users agreed to its terms of service which expressly disclaims liability for losses due to theft and limits damages to $50 per user Atomic’s motion to dismiss the class action laid against them. Source: PACER Atomic said the plaintiff’s negligence claims also lack legal merit because a lega...

A total of $4.8 million in funds have now been moved by the hacker to Bitcoin and now Avalanche. The hackers behind cryptocurrency casino Stake’s $41 million hack have shifted another $328,000 million worth of Polygon (MATIC) and Binance Coin (BNB) tokens — its latest moves following the Sept. 4 exploit, according to blockchain security firm CertiK. The most recent transfer involved 300 BNB tokens worth about $61,500 to an externally owned address “0x695…” which were then bridged to the Avalanche blockchain on Sept. 11 at 4:09 pm UTC. Another 520,000 MATIC tokens worth over $266,000 were also moved to Avalanche seven hours earlier at 7:18 am UTC. #CertiKSkynetAlert We are seeing a further movement of funds from the Stake exploiter. 520k MATIC was swapped and bridged to Avalanche before being bridged to BTC as per other fund movements from the exploiter. See more on Skynet https://t.co/Sdsfh29AoF — CertiK Alert (@CertiKAlert) September 11, 2023 The 520,000 MATIC and 300 BNB — t...

The attacker started returning stolen funds after accepting nearly $7 million in bug bounty. Funds had been returned to Alchemix and JPEGd. Lending platform Alchemix has announced the return of all stolen funds by the Curve finance hacker. The attack took place on July 30 and resulted in over $61 million in cryptocurrencies drained, including $13.6 million from Alchemix’s alETH-ETH pool.  Along with Alchemix, JPEGd’s pETH-ETH pool saw outflows of $11.4 million, and Metronome’s sETH-ETH pool was drained in over $1.6 million. The hacker targeted stable pools on Curve Finance using vulnerable versions of the Vyper programming language through reentrancy attacks. We are extremely happy to announce that all funds stolen by the hacker of the Alchemix @CurveFinance pool have now been returned. Full post mortem coming. — Alchemix (@AlchemixFi) August 5, 2023 The return of funds started after the hacker accepted a bug bounty offer. Curve, Metronome and Alchemix jointly announced an initia...

Diligence Fuzzing lets developers introduce random and invalid data points to find security flaws. Blockchain technology firm ConsenSys publicly released its “Diligence Fuzzing” tool for smart contract testing, according to an Aug. 1 announcement. The new tool produces “random and invalid data points” to find vulnerabilities in contract s before they are launched. Over $2.8 billion was lost in decentralized finance hacks in 2022. According to ConsenSys, these losses are leading developers to embrace more sophisticated testing tools to help find vulnerabilities before attackers do. The new tool used to be available in a closed beta version, where developers needed to get approval for access. This approval process is no longer necessary as of Aug. 1. Diligence Fuzzing is also now integrated with smart contract toolkit Foundry and Features a free version for developers who want to test it out before spending any money. Diligence Fuzzing tutorials. Source: Consensys Related: Crypto ...

The hacker committed a $196 million flash loan attack on the Ethereum-based lending protocol on March 13. Ethereum-based noncustodial lending protocol Euler finance is trying to cut a deal with the exploiter that stole millions from its protocol, demanding the hacker returns 90% of the funds they stole within 24 hours or face legal consequences. The platform was exploited for $196 million on March 13 and Euler Labs sent its ultimatum to the flash loan attacker by transferring them 0 Ether (ETH) with an attached message on March 14: “Following up on our message from yesterday. If 90% of the funds are not returned within 24 hours, tomorrow we will launch a $1M reward for information that leads to your arrest and the return of all funds.” euler just sent an on-chain message to the hacker pic.twitter.com/0wKIW51NjM — 0xngmi (llamazip arc) (@0xngmi) March 14, 2023 The threat of law enforcement comes as Euler sent the hacker a much more civil message the day before. “We understand yo...

Ethical hacking is the practice of identifying and testing vulnerabilities in a system to improve its security and prevent unauthorized access. Ethical hacking, also known as “white hat” hacking, is the process of identifying and exploiting vulnerabilities in a computer system or network in order to assess its security and provide recommendations for improving it. Ethical hacking is done with the permission and knowledge of the organization or individual that owns the system being tested. Ethical hacking aims to find flaws in a system before malevolent hackers may take advantage of them. The same tools and methods used by malevolent hackers are also used by ethical hackers, but their objective is to enhance security rather than cause harm. Here’s how ethical hacking typically works. Planning and reconnaissance The target system or network is investigated by the ethical hacker in order to acquire data that could be utilized to find weaknesses. This could consist of information such as ...

The company says users' losses will be 100% reimbursed by mid-March. According to an official Telegram statement on March 1, Singaporean cross-chain crypto Wallet developer BitKeep says it has reimbursed 50% of user assets lost during a security breach stemming from Dec. 26, 2022. On the date of the incident, an estimated $8 million was stolen by hackers after BitKeep's APK 7.2.9 (Android Package Kit) installation package was hijacked and swapped. Users who downloaded the malware subsequently saw their private keys compromised, leading to the theft of assets.  As told by BitKeep, a total of 6,731 verified addresses were breached during the incident. The firm has since completed reimbursing 50% of stolen assets in the affected addresses, with "expedited processing" for the remaining 50% of funds. BitKeep says it will complete its compensation plan ahead of schedule and release the remaining funds within two weeks. In a statement to Cointelegraph, a spokesperson for B...

A cybersecurity firm warned users of a fake Pokemon NFT game that spreads malware and targets gamers. In this week’s newsletter, read about how the Metaverse may integrate touch and smell . Check out how the nonfungible token (NFT) project Moonbirds plans to become a global brand and how NFT marketplace Magic Eden will refund users affected by a recent exploit. In other news, find out how NFT image hosting issues can be resolved, according to executives within the NFT space. And don’t forget this week’s Nifty News featuring a warning to gamers about a fake Pokemon NFT game spreading malware.  Touch and smell become the next big thing for the metaverse at CES 2023 One of the catalysts for the metaverse to generate $5 trillion in value in 2030 is the development of a more human experience. With the senses of smell and touch added to virtual reality (VR) experiences at the Consumer Electronics Show (CES) 2023, the metaverse is set to deliver more positive experiences to users. A metavers...