We recently reported that the Balancer DeFit protocol suffered a $500,000 attack. Less than 24 hours later, a second attack claimed about $2,300 worth of Compound tokens (COMP). Hao, an engineer at DeBank, tweeted that an attacker was able to fool the Balancer system into thinking he was owed a significant portion of the COMP tokens stored in the decentralized exchange’s pool. The attack involved flash loans from both dYdX and Uniswap. The hacker loaned more than $33 million that was used to generate cTokens representing ownership in a Compound pool. The attacker then transferred the cTokens to a Balancer …
Russia’s blockchain-based voting system for the constitutional amendments has reportedly been attacked via an election observer’s node. As reported by state-owned news agency TASS, the attack occurred on June 27 around 8 PM CET. A government of Moscow representative told TASS that the attack did not cause a system malfunction, meaning that all e-votes will be successfully recorded on the blockchain. According to the official, cybersecurity experts were working to restore access to the attacked node. It is not clear if it’s been repaired at this point. E-voting, held from June 25 to June 30 for residents of Moscow and …
The Balancer automated market maker protocol has been hacked for over $500,000 in a single Ether (ETH) transaction, facilitated once again by a dYdX flash loan. As analyzed by the 1inch.exchange team a few hours after the incident, a carefully crafted transaction taking more than 8 million gas, or about two thirds of an Ethereum block, stole over $500,000 in Ether, Wrapped Bitcoin (WBTC), Chainlink (LINK) and Synthetix (SNX) tokens. Taking advantage of programmed burn Timestamped at 6 PM UTC on Sunday, the transaction begins with a flash loan from dYdX for 104,000 ETH, or about $23 million. The exploit …
Scientists in China were able to exchange an encryption key at a distance of 1,120 kilometers, this exceeds the previous best attempt by 1,000 kilometers. Crypto experts discuss whether this could have practical implications for the industry. Hackerproof cryptography? Quantum computers are scarecrows for the crypto industry for years, with some speculating that the advances in this technology will make all existing cryptography obsolete. This time quantum entanglement was used to exchange a secret key that could be used to encrypt and decrypt messages. One could imagine if this technology becomes a commodity it could make crypto hacking obsolete as …
Cybersecurity firm Symantec blocked a ransomware attack by a group known for demanding payment in Bitcoin (BTC) directed at 30 U.S.-based firms and Fortune 500 companies. The announcement published by the cybersecurity firm claims that the Evil Group, the malware gang behind the attacks, targeted the IT infrastructures of the firms. Still, the companies were alerted in time to prevent deployment of the ransomware. The group used the ransomware WastedLocker and managed to breach the security of the victims' networks and unsuccessfully attempted to laying the ground for staging the attacks. Gang asks for million-dollar payments Cointelegraph reported recently a …
A mammoth global spying and data theft effort currently leaves web surfing citizens at risk, with several Bitcoin and crypto domains included in the mix, according to research from Awake Security. At the heart of the problem — a web domain registration company named CommuniGal Communication, or GalComm. "Of the 26,079 reachable domains registered through GalComm, 15,160 domains, or almost 60%, are malicious or suspicious," Awake wrote in a June 18 blog post. A list of sites at risk Although the nefarious movement uses several different methods, including malware, such activity has passed under the radar of popular security systems, …
A report from the Cyber Security Agency of Singapore, or CSA, shows that the number of ransomware attacks cases rose in 2019, compared to figures recorded in 2018. According to a “Cyber Landscape 2019” study published by the Singaporean government, the entity received 35 reports of ransomware incidents in 2019. This represents a surge compared to the 21 cases that reported in 2018. Most of the attacks targeted the travel, tourism, manufacturing, and logistics industries. Phishing attacks also rose in 2019 Phishing cases also saw a sharp increase. The agency discovered 47,500 related URLs in 2019 — up from 16,100 …
Will Binns, one of Bitcoin.org's overseers, said he has lost access to the site, claiming a breach may have occurred. "Bitcoin.org, where many people also download the latest version of Bitcoin Core software, is now in danger of becoming compromised, if it hasn't just happened," Binns said in a June 24 Github post. Bitcoin.org has been in transition Bitcoin.org, a focal point for Bitcoin (BTC) and blockchain education thought to be an original product of Bitcoin creator Satoshi Nakamoto, has changed hands several times over the last decade since the creator's exit. Nakamoto reportedly handed off the site's management to …
Using a decentralized exchange, or DEX, on a mobile device does not necessarily make for greater hacking risk, according to Kadan Stadelmann, CTO of blockchain platform Komodo. "I don’t think that the risk to a mobile DEX is necessarily higher than that of a DEX accessed through another medium," Stadelmann told Cointelegraph. "The risk would vary depending on the user’s device, OS [operating system], version, etc.," he added. DEX built on Komodo Constructed on Komodo's network, AtomicDEX is a decentralized exchange working with multiple blockchains, in contrast to other DEXs that only host tokens based on one chain. The DEX …
The REvil ransomware gang says that they will auction over 1TB of data stolen from New York-based entertainment law firm, Grubman Shire Meiselas & Sacks. This data allegedly contains the “dirty” secrets of a number of celebrities. REvil claims that the contents involve sex scandals, drugs, and treachery. Nicki Minaj, LeBron James, and Mariah Carey among the alleged victims In a blog post, the ransomware group says they will begin the auction on July 1, noting that the first round will contain information from Nicki Minaj, Mariah Carey, and LeBron James. The price for each dataset is $600,000. Two days …
A new report shows that a Kazakhstani hacker built a million dollar fortune by breaching private networks and selling their data. Researchers at threat intelligence company, Group-IB, said that the hacker, who operates under the pseudonym “Fxmsp,” began promoting their services across darknet. They posted data for sale on hacking-related forums, offering valuable resources stolen from private corporate networks. Some customers have taken to calling the hacker “The invisible god of networks.” Millionaire profits for Fxmsp According to the report, the magnitude of Fxmsp’s cybercriminal business is enormous. They reportedly accumulated $1.5 million in profits over three years by targeting …
A malware group called Evil Corp is reportedly back in action, having recently launched a new ransomware which asks its victims to pay a million dollar ransom. The group had previously gone quiet after the U.S. Department of Justice charged some of its members in December 2019. According to a report published on June 23 by the cybersecurity firm Fox-IT, a division of NCC Group, Evil Corp has been active since 2007 — the group is considered to be one of the biggest cybercrime teams on the internet. They are known for using the Dridex malware and BitPaymet ransomware. U.S. …