Slowmist, teaming up with Imtoken, has exposed a new cryptocurrency scam exploiting offline transactions and using USDT, where scammers manipulate Ethereum RPC to falsify USDT balances in the victim’s wallet. The con artists coax victims into changing their Ethereum RPC URL to one they control, making it appear as though USDT funds were deposited, only…
Read more
According to blockchain security company SlowMist, OKX DEX, a decentralized exchange aggregator platform, lost cryptocurrency valued at over $400,000. An attacker was able to transfer tokens that users had not allowed by compromising the management privileges of a market maker contract, according to the explanation for the vulnerability. On the OKX DEX aggregator platform, a…
Read more
SlowMist found that across 303 recorded blockchain security incidents in 2022, nearly a third were made up of phishing attacks, rug pulls and scams. Blockchain security firm SlowMist has highlighted five common phishing techniques crypto scammers used on victims in 2022, including malicious browser bookmarks, phony sales orders and Trojan malware spread on the messaging…
Read more
The funds returned so far has come in the form of Ether (ETH), Binance-pegged ETH and BNB ($14.2 million). A quick response from a number of blockchain security companies has helped facilitate the return of around 70% of the $23 million exploit of decentralized exchange (DEX) aggregator Transit Swap. The DEX aggregator lost the funds…
Read more
Ethereum defi protocol Cream Finance suffered an exploit yesterday that allowed attackers to steal $130 million from its holdings. The news was first revealed by Peckshield, a blockchain analytics company that discovered a flash loan had exploited the platform. This is the third hack the protocol has suffered in its history, being exploited for $36…
Read more
Lido assures LDO, stETH tokens remain safe despite flaw in token contract
The “fake deposit” attack enables bad actors to execute a transfer where the requested value is larger than what the user actually owns. Ethereum staking protocol Lido Finance has assured both Lido DAO (LDO) and staked-Ether (stETH) tokens remain safe despite hackers allegedly exploiting a known security flaw in LDO’s token contract. Lido didn’t confirm…
Read more