Hackers hack McDonald’s Instagram to promote a fake meme coin, stealing $700,000

2 mins read

Hackers infiltrated McDonald’s Instagram account and utilized it to endorse a counterfeit joke cryptocurrency called GRIMACE, ultimately executing a rug-pull fraud that resulted in over $700,000 in theft. The spurious token, erroneously associated with McDonald’s, experienced a temporary surge in value, reaching $25 million before plummeting. The assailants, identified as “India X Kr3w,” expeditiously liquidated their investments, resulting in investors being left with valueless assets. Rug pulls are fraudulent schemes

Major Security Breach at Indian Crypto Exchange WazirX: Over $235 Million Stolen

2 mins read

In a major security incident, Indian cryptocurrency exchange WazirX fell victim to a hack that resulted in the theft of around $235 million worth of various digital assets. The breach, which occurred on July 18th, 2024, targeted WazirX’s multisig wallet on the Ethereum network. Investigators believe the stolen funds were moved to a new address and then partially converted to Ethereum using the Tornado Cash mixing service, a tool often

Shido token drops by 90% as exploiter drains Ethereum staking contract

1 min read

A layer 1 blockchain Shido token experienced over 90% drop in just 30 minutes after an exploit, according to blockchain security firm PeckShield. Furthermore, the attacker transferred the Ethereum staking contract to another address and upgraded it with a hidden function to withdraw staked tokens. The blockchain security and data analytics company, PeckShield, reported that the hacker had withdrawn over 4.3 billion Shido tokens, nearly half of the nearly 9

Co-founder of Axie Infinity losses over $9.7 million worth of Ethereum to hackers

1 min read

Jeff Zirlin, co-founder of Axie Infinity, has confirmed that his crypto wallets were compromised, resulting in a loss of $9.7 million worth of Ethereum. The breach, which affected two of Zirlin’s addresses, was confined to his accounts and did not affect the Ronin chain or Sky Mavis’ operations. Security analytics firm PeckShield reported the breach first, involving a “whale wallet” linked to Zirlin. Even if there has been a noticeable

This crypto exchange loses over $10 million to hackers

1 min read

Over the weekend, SOMESING, a popular South Korean karaoke service, was hacked, resulting in the theft of hundreds of millions of SSX tokens. Following the incident, several South Korean crypto exchanges, including Upbit, Bithumb, and Coinone, have issued warnings to users and taken immediate steps to reduce potential investor risks. On January 29, Upbit, South Korea’s largest crypto exchange, issued a press release informing users of the SSX token hack

This play-and-own mobile gaming platform GAMEE loses over $14 million to hackers

1 min read

The play-and-own mobile gaming platform GAMEE suffered a security breach in its GMEE token contracts on the Polygon network. The exploit resulted in the theft of 600 million GMEE tokens, worth around $14 million. As the crypto community awaits further developments, GAMEE has provided preliminary insights into the incident and outlined its plans for dealing with the fallout. On January 22, the X (formerly Twitter) account of GAMEE Token advised

DeFi Giants Aave and Yearn Finance Hacked

1 min read

Two of Ethereum’s most popular DeFi protocols, Aave and Yearn Finance, have reportedly suffered an exploit. Blockchain security firm PeckShield has directed a tweet to Aave requesting verification of a specific transaction hash. According to the security firm, Yearn Finance was attacked by a flash loan, and the exploit has affected Aave V1, with damage potentially exceeding $11 million. The attacker received a mix of stablecoins from Yearn Finance and

PNetwork bridge drains over $4.3 million in tokens that it had issued on its bridge

2 mins read

According to on-chain analysis by security firm BlockSec, the “white hat” exploit was carried out today after the team claimed to have discovered a “misconfiguration” in the token’s smart contract. The pNetwork developers attempted to outrun any malicious hackers by “draining” pgala tokens stored in PancakeSwap pools. These pNetwork-issued tokens are a 1:1 tokenized version of the gala tokens used in the play-to-earn project Gala Games. The tokens are issued

Rubic, a decentralized exchange, loses $1,000,000 due to a private key exploit

2 mins read

Rubic, a decentralized exchange (DEX), has lost over a million tokens as a result of hackers getting hold of an administrator’s wallet’s private keys. The project’s developers disclosed that one of their admins’ wallet addresses, which controlled the RBC/BRBC bridge and staking rewards, had been compromised during the early morning hours of Asia. “We believe malicious software was utilized to gain access to the private keys for the admin wallet,”

Skyward Finance was drained for $3 million in wrapped Near tokens

1 min read

A launchpad for the Near Protocol called Skyward Finance was drained for $3 million in wrapped Near tokens. The Skyward Finance team confirmed the fraud, saying that “a contract exploit has been used to drain the Skyward Treasury.” The exploit, according to security company BlockSec, was used in just one transaction. In this transaction, the hacker redeemed from Skyward’s Treasury Contract more than 1.1 million wrapped Near tokens worth $3

Over $1.42 million hacked from multi-chain wallet project UvToken

1 min read

UvToken, a multi-chain wallet project, has lost $1.45 million due to a smart contract exploit. UvToken, a multi-chain crypto wallet, has been hacked for 5,011 BNB tokens (1.45 million), with the funds already routed into authorized crypto mixer Tornado Cash. This comes in the midst of a flurry of hacks and exploits this month, which appears to be a particularly bad month for DeFi projects. According to security firms Ancilia

A hacker stole around $300,000 in OHM tokens from DeFi protocol Olympus DAO

1 min read

A hacker stole 30,437 OHM tokens (about $300,000) from one of Olympus DAO’s Ethereum smart contracts. According to security firm PeckShield, the incident occurred because a contract failed to properly validate the hacker’s illicit fund transfer request. The contract in question, known as “BondFixedExpiryTeller,” was used to open bonds denominated in Olympus DAO’s OHM tokens. The contract lacked a validation input in the “redeem() method,” allowing the attacker to redeem