Security Team: More than 5,000 Solana wallet funds were stolen, and the vulnerability may affect ETH users

[Security Team: More than 5,000 Solana wallet funds were stolen, and the vulnerability may affect ETH users] On August 3, the blockchain audit security team OtterSec posted on social media that there were more than 5,000 Solana wallets in the past few hours Funds were stolen, and OtterSec analysis revealed that the transactions were signed by the actual owners, indicating a compromised private key. The vulnerability could also affect ETH users.

Other news:

Security team: The Brahma TopGear (brahTOPG) project has the risk of any external calls, please cancel the authorization quickly: November 10 news, according to the monitoring of the SlowMist security team, on November 10, 2022, the brahTOPG project on the ETH chain was attacked , the attacker made a profit of approximately $89,879. According to the analysis of the SlowMist security team, the main reason for this attack is that the Zapper contract strictly checks the data passed in by the user, which leads to the problem of arbitrary external calls. user tokens.

The SlowMist security team reminds users who have used the contract to cancel the authorization of the contract quickly to avoid the risk of asset theft. [2022/11/10 12:43:42]

Security Team: BXH’s stolen funds have changed, and more than 17 million US dollars of funds have been transferred across the chain to the BTC network: In the early morning of September 4 (UTC+8), SlowMist monitored BXH’s stolen funds. Changes, analyzed by SlowMist MistTrack , the transaction details are as follows:

1/BSC chain, hacker address 0x48c9...7d79 Approve Cake Token to PancakeSwap.

2/ETH chain, hacker address 0x48c9...7d79 will 3987.78 WETH Withdraw into ETH.

3/ETH chain, hacker address 0x4967...Eb35 used Uniswap and Curve to convert all DAI into renBTC and WBTC, and the total after conversion was 858.0454 renBTC and 795.2618 WBTC respectively; among them, 858.0454 renBTC (worth about 17.01 million US dollars) have all cross-chain To the BTC chain, the address after the cross-chain is 1DYR...heSF, and the BTC has not been further transferred yet.

So far, the stolen funds of BXH have not been transferred to the exchange, and all the stolen funds are still in the hacker's address. SlowMist MistTrack will continuously monitor the transfer of stolen funds. [2022/9/4 13:07:50]

Security Team: QANplatform attackers transferred 186 ETHs through Tornado Cash: Jinse Finance reported that, according to the monitoring of the CertiK security team, QANplatform attackers transferred 186 ETHs (worth about $365,000) through Tornado Cash. Wallet address: ETH: 0xc6d3F752A65Df7fb937B25C55Bea6Ae7E70f07Ce. [2022/5/19 3:28:04]