2024-03
Munchables suffered a Blast-chain exploit in which linked analysis describes contract manipulation, including a backdoor implementation contract that was later replaced with normal logic to obscure the attacker’s tracks. Reporting discussed possible DPRK …
🇺🇸 United States
#Cryptocurrency
#Suspicious
#FinancialGain
2024-03
Kimsuky distributed malware disguised as installation files for South Korean public institutions, using a dropper signed with a valid domestic company certificate to unpack and execute the Endoor backdoor. The linked evidence connects the activity to Kims…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2024-01
Kimsuky used trojanized security or software installers masquerading as legitimate Korean software packages, including TrustPKI and NX_PRNMAN, to deploy Troll Stealer/TrollAgent and related backdoor malware. The installers executed normal setup files as d…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2024-01
Hector Network suffered a smart-contract exploit involving the centralized AddEligibleWallet function, which allowed a designated address to be treated as eligible and interact with funds intended for investor compensation. Linked analysis described the i…
#Cryptocurrency
#FinancialGain
2024-01
Following a security breach on January 27, 2024, in which approximately 730 million SSX tokens were stolen from the SOMESING Foundation, the team promptly notified exchanges to halt deposits and withdrawals and worked with them to freeze the hacker’s acco…
🇰🇷 Korea, Republic of
#Cryptocurrency
#FinancialGain
2024-01
Concentric.Fi was compromised after a targeted social-engineering attack against a team member led to malware installation and exposure of the deployer wallet's private keys. The attacker used the resulting ownership access to upgrade Cone pool contracts …
#Cryptocurrency
#FinancialGain
2023-12
Orbit Bridge reported an exploit of its Ethereum vault in which an unidentified attacker conducted six theft transactions affecting ETH, WBTC, USDT, USDC, and DAI with losses estimated at about $81.5 million. Orbit Chain said it worked with the Korean Nat…
🇰🇷 Korea, Republic of
#Cryptocurrency
#FinancialGain
2023-12
In December 2023, OKX's decentralized exchange (DEX) aggregator lost $2.7 million due to a private key compromise. Attackers upgraded a deprecated proxy contract and used it to siphon funds from users who had previously approved the contract. Despite comm…
🇸🇨 Seychelles
#Cryptocurrency
#FinancialGain
2023-11
HTX was reported together with the HECO Bridge incident as a November 2023 compromise affecting a centralized exchange and bridge environment, with linked analysis describing the attack style as consistent with DPRK Lazarus Group activity. Subsequent repo…
🇸🇨 Seychelles
#Cryptocurrency
#FinancialGain
2023-11
HECO Bridge was exploited when the attacker used the Heco Bridge Operator to call withdrawToken and remove ETH and ERC-20 assets, then swapped tokens for ETH and distributed proceeds across multiple wallets. Linked blockchain-intelligence reporting attrib…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2023-11
Microsoft Threat Intelligence identified a supply chain attack by the North Korean group Diamond Sleet (ZINC) involving a compromised CyberLink application installer. The installer, signed with a valid CyberLink certificate, was modified to include malici…
🇹🇼 Taiwan
#SupplyChain
#Technology
2023-11
On November 14, 2023 at approximately 15:49 UTC, Uno Re suffered a deployer private-key compromise that let an attacker transfer contract ownership, alter the claims assessor role, and drain SSIP, SSRP, and Rewarder contracts. Uno Re reported losses of 32…
🇪🇪 Estonia
#Cryptocurrency
#FinancialGain
2023-11
Poloniex hot wallets on Ethereum, Tron, and Bitcoin were compromised on 10 November 2023, causing losses estimated between roughly $114 million and $132 million and triggering reimbursement, asset-freezing, and bounty measures by the exchange. CertiK desc…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2023-10
Mark Cuban's hot wallet was drained of nearly $900,000 in cryptocurrency after a security breach affecting the billionaire investor and Dallas Mavericks owner. A later ZachXBT laundering analysis included Maverick Founder among 25 cryptocurrency hacks fro…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2023-10
Fantom Foundation suffered a hot-wallet hack in mid-October 2023 that affected assets held by the project and prompted crypto-security analysis of the related wallet transactions. Linked evidence describes the incident as a reminder of hot-wallet and digi…
🇰🇾 Cayman Islands
#Cryptocurrency
#FinancialGain