Posts

Showing posts with the label hacks

Crypto thief steals $4.4M in a day as toll rises from LastPass breach

Estimates in September revealed that at least $35 million in crypto has been stolen from victims of the LastPass breach since 2022, with the latest hack adding to the toll. At least 25 people have reportedly seen $4.4 million in crypto drained from across 80 wallets due to a 2022 data breach that impacted password storage software LastPass. In an Oct. 27 X (Twitter) post, pseudonymous on-chain researcher ZachXBT said they and MetaMask developer Taylor Monahan tracked the fund movements of at least 80 wallets compromised on Oct. 25. “Most, if not all, of the victims are longtime LastPass users and/or confirm having stored their [crypto wallet] keys/seeds in LastPass,” Monahan said in an accompanying Chainabuse report. Just on October 25, 2023 alone another ~$4.4M was drained from 25+ victims as a result of the LastPass hack. Cannot stress this enough, if you believe you may have ever stored your seed phrase or keys in LastPass migrate your crypto assets immediately. pic.twitter.com/2...

Mixin Network offers $20M bug bounty to hackers in $200M hack

Image
Mixin Network suffered a breach in its third-party cloud server database resulting in the theft of nearly $200 million worth of digital assets. Mixin Network, a decentralized cross-chain protocol, in a message to the hacker behind the $200 million exploit on Sept. 23, has offer ed a $20-million bug bounty for the return of the remaining funds. Mixin Network encrypted the message with the exploiter transaction, requesting the exploiter to return the funds as the majority of the stolen funds were user assets. “Most of our platform assets were users, and we hope you can refund them. You can keep $20M of the assets as a BUG Bounty Reward for the BUG.” Mixin Network confirmed the exploit on Sept. 25, claiming the exploiters managed to breach a third-party cloud service provider, which resulted in the theft of nearly $200 million of assets from the platform. [Announcement] In the early morning of September 23, 2023 Hong Kong time, the database of Mixin Network's cloud service provide...

North Korean hackers have stolen $2B of crypto since 2018: Report

Image
TRM Labs estimates that North Korean hackers have stolen $200 million of cryptocurrency in 2023 alone. North Korean hackers continue to threaten the broader cryptocurrency ecosystem, having stolen an estimated $2 billion of crypto over the past five years. Blockchain intelligence firm TRM Labs released its latest deep dive into the murky world of cryptocurrency-related hacking, focusing on the exploits of North Korean cybercriminals. According to TRM Labs’ data, North Korea has stolen around $200 million of crypto in 2023, accounting for 20% of all stolen funds this year. North Korean cyberattacks are estimated to be 10 times larger than attacks by other malicious actors. Hackers from the country have also honed in on the decentralized finance (DeFi) ecosystem, preying on cross-chain bridges that continue to handle a significant volume of cryptocurrency transfers. Related: North Korea stole more crypto in 2022 than any other year: UN report Cross-chain hacks, such as the Axie Infini...

Jimbos Protocol offers deal to hacker, threatens police action

Image
The deal was posted to both the Ethereum network and the protocol’s official Twitter channel. The team behind exploited decentralized finance (DeFi) app Jimbos Protocol has offered a deal to the app’s exploiter: Keep 10% of the funds and return the other 90%, or face prosecution. Otherwise, the team “won’t stop” until the attacker is “behind bars.” The proposed deal was disclosed in a May 28 tweet by the Jimbos team and posted to the Ethereum network. To the attacker: keep a fast $800k payday, and live to tell the tale. We won't pursue you if you send back the 90%. But if you don't, we won't stop until you're behind bars. You can open communications with us at Helloitsjimmy@proton.me — Jimbos Protocol (v2, soon) (@jimbosprotocol) May 29, 2023 On May 28 at 7:25 am UTC, the team posted a message to the Ethereum network stating that the attacker would not be prosecuted if 90% of the funds are returned. First Jimbos Protocol message to attacker. Source: Ethereum blockcha...