Posts

Showing posts with the label hackers

Balancer blames ‘social engineering attack’ on DNS provider for website hijack

Image
Blockchain security firms SlowMist and CertiK also believe the crypto wallet drainer Angel Drainer was involved in the estimated $238,000 exploit. The team behind Balancer, an Ethereum-based automated market maker, believes a social engineering attack on its DNS service provider was what led to its website ’s frontend being compromised on Sept. 19, leading to an estimated $238,000 in crypto stolen. “After investigation, it is clear that this was a social engineering attack on EuroDNS, the domain registrar used for .fi TLDs,” the firm explained in a Sept. 20 X post. Approximately 8 hours after the first warning of the attack, Balancer said its decentralized autonomous organization (DAO) was actively addressing the DNS attack and was working to recover the Balancer UI. At 5:45 pm UTC on Sept. 20, Balancer said it was successful in securing the domain and bringing it back under the control of Balancer DAO. It also confirmed its subdomains “app.balancer.fi” and other “balancer.fi” are...

FTX suspends user accounts amid Kroll cyber breach concerns

FTX's decision was undertaken as a proactive measure aimed at preventing the occurrence of any potential future incidents or additional harm following the recent hack. Following the recent Kroll cybersecurity breach , FTX Derivatives Exchange, a financially distressed cryptocurrency trading company, has opted to temporarily suspend accounts of impacted users accessing its claims portal. FTX's decision which was posted on X (formerly known as Twitter) was undertaken as a proactive measure aimed at preventing the occurrence of any potential future incidents or additional harm following the recent hack. The exchange is dedicated to offering more comprehensive information in the subsequent stages. In response to Kroll’s cybersecurity incident, FTX has taken the precautionary measure of temporarily freezing affected user accounts within the customer claims portal. We thank you for your patience, and will provide additional information regarding next steps in due course. — FTX (@F...

Arbitrum-based Jimbos Protocol hacked, losing $7M in Ethereum

The attacker took advantage of the lack of slippage control of liquidity conversions to steal the funds. Adding to the existing number of protocol hacks in the crypto industry, Jimbos Protocol has not escaped the sights of the attackers as it has suffered an attack resulting in a loss of a large amount of funds. According to PeckShield, a blockchain security unit, Jimbos Protocol, the liquidity protocol of the Arbitrum system, was hacked on the morning of May 28. The attack resulted in the loss of 4,000 ETH, equivalent to approximately $7.5 million. Specifically, the attacker took advantage of the lack of slippage control of liquidity conversions. The protocol's liquidity is invested in a price range that doesn't need to be equal, creating a loophole where attackers can reverse swap orders for their own gain. Despite being launched less than 20 days ago, the Jimbos Protocol aimed to address liquidity and volatile token prices through a new testing approach. However, it appear...

No 'respite' for exploits, flash loans or exit scams in 2023: Cybersecurity firm

The industry is likely to see “further attempts from hackers targeting bridges in 2023," while users are urged to be warier of their private keys. The new year is a fresh start for malicious actors in the crypto space and 2023 won’t likely see a slowdown in scams, exploits and hacks, according to CertiK. The Blockchain security company told Cointelegraph its expectations for the year ahead regarding bad actors in the space, saying: “We saw a large number of incidents last year despite the crypto bear market, so we do not anticipate a respite in exploits, flash loans or exit scams.” Regarding other ill-natured incidents the crypto community might face, the company pointed to the “devastating” exploits that took place on cross-chain bridges in 2022. Of the 10 largest exploits during the year, six were bridge exploits that stole around $1.4 billion. Due to these historically high returns, CertiK noted the likelihood of “further attempts from hackers targeting bridges in 2023.” Prot...

Fidelity plans NFT marketplace: Nifty Newsletter, Dec. 21–27

Image
Investment firm Fidelity recently filed trademarks that showed its intentions to enter the NFT and metaverse space. In this week’s newsletter, read about investment giant Fidelity planning to enter the nonfungible token (NFT) space and how Italy’s NFT market will grow. Check out how North Korean hackers use phishing websites to target NFT holders and listen to a conversation with Crypto Raiders in the NFT Steez podcast. And, don’t forget this week’s Nifty News featuring Japanese gaming firm Square Enix investing millions in an NFT game developer.  Fidelity plans NFT marketplace and financial services in the metaverse On Dec. 21, investment firm Fidelity filed three trademark applications to the United States Patent Trademark Office. The trademark filings cover NFTs, NFT marketplace s and metaverse investment services, suggesting that the firm has plans to enter the space. One of the firm’s focuses appears to be the metaverse, showing that it may someday offer investment services w...