#breaking
❌ Hackers hacked the BigONE exchange for $27,000,000 (SlowMist)

@Сryptoz ₿

#scam #breaking
❌ Hackers launched advertising of fake crypto applications to a multi-million audience.

The cyber company Check Point disclosed the JSCEAL operation - since March 2024, fake ads under the guise of Binance, MetaMask and Kraken have been distributing malware.

➥ Advertising leads to fake sites with infected software.

➥ After installation, the virus steals:
- Passwords and seed phrases.
- Telegram data.
- Access to crypto wallets.

➥ Also modifies extensions (e.g. MetaMask) to steal funds.

➥Coverage: More than 10,000,000 users worldwide.

@Сryptoz ₿

#breaking #scam
❌ Hackers have learned to hide malware in ordinary photos.

The North Korean group APT37 sends ZIP archives with «innocent» files.

When opened, a virus is activated that steals documents, takes screenshots and accesses Dropbox, Yandex.Disk and other cloud services.

@Сryptoz ₿

#breaking
🤯 Arkham revealed the largest crypto theft in history - 127.426 BTC for $3.5b at the 2020 exchange rate (now ~$14.6b).

At the peak in 2020, the Chinese mining pool LuBian controlled almost 6% of the hashrate of the Bitcoin network. But in December of the same year, it was hacked:

⊹ December 28 - hackers withdrew more than 90% of BTC from wallets.
⊹ December 29 - another $6m was stolen in BTC and USDT through an address in the Bitcoin Omni network.
⊹ December 31 - the remaining funds were transferred to backup wallets.

LuBian tried to contact hackers through OP_RETURN messages in the blockchain - 1516 transactions and 1.4 BTC went to requests to return assets.

No one reported it publicly - neither the company nor the attackers.

The reason for hacking is a vulnerable private key generation algorithm that can be brute-forced.

All stolen BTC are still stored in one address - it is the 13th largest BTC wallet in the world.

@Сryptoz ₿

#breaking
❌ The hacker hacked the access rights management system in CrediX and emptied the liquidity pool (SlowMist)

The attacker was added in the role of Admin and Bridge. Having received the right roles, he minted secured tokens through the pool and withdrew a large amount of assets.

@Сryptoz ₿

#scam #breaking #aave
🚫 Aave SCAM site detected in Google’s advertising unit - PeckShieldAlert

Phishing ads are designed to empty crypto wallets - malware is usually introduced into such fake sites.

@Сryptoz ₿

#breaking
❌ Turkish crypto exchange BtcTurk hacked for $50,000,000 - CertiK

@Сryptoz ₿

#breaking #scam #puffer
❌ Hackers hacked the Puffer Finance website and social networks (warning)

DO NOT interact with project applications and do not click on links in their official channels.

@Сryptoz ₿

#scam #breaking #wlfi
🚫 Hackers steal WLFI through the EIP-7702 vulnerability (SlowMist)

✦ Immediately after the launch of WLFI, there were complaints: tokens fly away from the victims’ wallets.

✦ The «classic exploit EIP-7702» is used - hackers introduce a malicious contract into the address in advance, and as soon as the tokens enter the wallet, they are immediately written off by the hacker.

✦ The victims write in social networks that they have to withdraw funds in a race with bots. Someone managed to save only 20% of WLFI, the rest hung in the compromised wallet.

@Сryptoz ₿

#breaking
🔠 #XVS Venus protocol hacked for $30,000,000+ (bscscan)

UPD: Most likely, the funds were stolen from the user as a result of phishing. The protocol itself was not affected.

@Сryptoz ₿

#breaking
🔠 The Nemo Protocol project was hacked for $2,400,000.

@Сryptoz ₿

#breaking
❌ #RUNE Hackers hacked THORChain for $1,200,000 - PeckShield

UPD: There was an exploit of the investor’s personal wallet, not the project. The address may belong to the founder of THORChain.

@Сryptoz ₿

#breaking
❌ 0G Labs Twitter account has been hacked.

The hacker published a message accusing the team of a scam and demanding the «airdrop they promised».

P.S. The post has already been deleted, as well as almost all the basic information from the page.

@Сryptoz ₿

#breaking
⚠️ Discord has been hacked - hackers have gained access to users’ personal data.

Names, e-mail addresses, the last 4 digits of bank cards and passport photos could be publicly available.

The incident occurred due to an attack on the support contractor, the Discord servers were not affected.

@Сryptoz ₿

#breaking #seed
❌ Hackers hacked Garden Finance for $5,500,000 - ZachBXT

@Сryptoz ₿

#breaking
❌ The Balancer protocol was probably hacked for $70,600,000 - etherscan

Balancer is a DeFi protocol and automated market maker (AMM) that allows you to create liquidity pools and earn on exchange commissions.

@Сryptoz ₿

#breaking
😐 Marketmaker DWF Labs hid the hack for $44,000,000 - ZachXBT/tanuki42

In September 2022, the hacking group AppleJeus, associated with North Korea, stole assets of $44m from DWF Labs - mainly #USDC and #USDT.

The market maker has never publicly commented on this incident.

@Сryptoz ₿

#breaking #dimo
❌ Suspicious conclusion of 30,000,000 DIMO ($40k) - hackers could hack the admin wallet of the project (CertiK)

@Сryptoz ₿

#scam #breaking
❌ Scam in the comments on Polymarket - scammers have already stolen $500,000+.

How the scheme works:
• Attackers buy «Yes» and «No» best from different accounts to be displayed in the Holders filter.
• They throw a disguised link to a fake site under the Polymarket logo, ask for a login by email and show pseudo Cloudflare.
• The Copy button pushes a malicious command for the terminal, which downloads and instantly launches the script, steals the crypt, data and access.

Scammers’ wallets: 1 , 2

@Сryptoz ₿

#breaking
❌ Web3 Labs Twitter account has been hacked - DO NOT click on the links!

@Сryptoz ₿