Security Incidents

The U.S. Department of the Treasury expands its Cybersecurity Threat Identification Program, providing free threat intelligence services for blockchain companies to address the cybersecurity challenges facing the digital asset industry. A series of recent attack incidents, especially cases involving North Korean infiltration, have highlighted the risks to the crypto industry, prompting the government to incorporate it into its financial infrastructure protection framework to improve security defenses.

Phantom Wallet malfunctioned during the airdrop period, causing abnormal token prices and account balances to display. Although the assets are safe, users suffered trading losses, triggering compensation demands and a trust crisis. The incident also increased concerns about blockchain security, and some malicious actors may take advantage of the chaos to launch phishing attacks. Although the technical issue has been fixed, improvements are still needed to the user experience and system stability.

Phantom Wallet experienced a malfunction during the airdrop period, causing the token price and account balances to display abnormally. Although the assets were safe, users suffered transaction losses, triggering compensation requests and a crisis of trust. The incident also heightened concerns about blockchain security, as some bad actors may take advantage of the chaos to launch phishing attacks. While the technical issue has been fixed, improvements are still needed for the user experience and system stability.

Phantom Wallet experienced a malfunction during the airdrop period, causing abnormal token prices and account balances to display. Although users’ assets were safe, users suffered transaction losses, leading to compensation requests and a trust crisis. The incident also heightened concerns about blockchain security, and some bad actors may take advantage of the chaos to launch phishing attacks. While the technical issue has been fixed, improvements are still needed for the user experience and system stability.

A crypto project founded by the Trump family, WLFI, has drawn market attention to liquidity risk and alleged insider connections through lending facilitated by Dolomite. WLFI pledges stablecoins USD1 and platform tokens, borrows $31.4 million, and moves it to a CEX that is suspected to be used for exchanging it into fiat currency. WLFI has a high concentration level and also carries liquidation risk. On-chain data shows that WLFI has recently transferred a large amount of tokens, with the destination unclear, and has not yet responded regarding the transactions.

A certain CEX participated in an "Operation Atlantic" operation led by the U.K. National Crime Agency to crack down on crypto and investment scams, with a particular focus on authorized phishing schemes. The CEX provided on-site support, helped identify victims and malicious websites, and shared intelligence with law enforcement agencies, protecting thousands of potential victims.

On-chain sleuth ZachXBT accuses Gurhan Kiziloz, the suspected co-founder of the casino platform Spartans, of spearheading the Blockdag Network project, allegedly luring retail investors into fundraising with false promotion of $300 million, and withdrawing the funds to the Middle East within two years. Gurhan is also suspected of lavish spending and using public relations to maintain his image.

U.S. law firm Gibbs Mura initiates a class-action investigation into the Drift Protocol theft incident, involving an amount of approximately $280 million to $285 million. The law firm said that Circle did not freeze the stolen funds in a timely manner, and urged affected users to join the lawsuit to recover their losses.

Gate News message: On April 9, PeckShield posted a notice warning that the AethirOFTAdapter contract of the Aethir project may have been attacked. The stolen funds are currently held in an address on the BSC chain. PeckShield has publicly reminded the official teams of AethirCloud and AethirEco to look into this matter, but the exact loss amount has not been disclosed yet.

Phantom Wallet experienced a malfunction during the token airdrop, causing abnormal token prices and account balances to display. Although the assets were safe, users suffered transaction losses, which led to compensation demands and a trust crisis. The incident also heightened concerns about blockchain security, and some malicious actors may take advantage of the chaotic situation to launch phishing attacks. While the technical issue has been fixed, improvements are still needed for the user experience and system stability.

On-chain sleuth ZachXBT said the Bitcoin Depot hack resulted in an actual loss of 54 bitcoins, which is more than its official reported figure of 50.9 bitcoins. The hacker stole the funds on March 20 after compromising credentials, and Bitcoin Depot only discovered the loss three days later.

Phantom Wallet experienced a malfunction during the airdrop period, causing abnormal token prices and account balance displays. Although users’ assets are safe, users suffered transaction losses, leading to compensation demands and a trust crisis. The incident also heightened concerns about blockchain security, and some malicious actors may take advantage of the chaotic situation to launch phishing attacks. Although the technical issues have been fixed, improvements are still needed for the user experience and system stability.

On-chain detective ZachXBT revealed that Bitcoin ATM operator Bitcoin Depot discovered about 50.9 BTC were stolen on March 23. The investigation shows the incident actually occurred on March 20; after the funds were transferred out, it was not noticed until about three days later. Potential fund flows involving higher amounts have not yet been identified.

Odin Fun co-founder Bob Bodily said that in response to recent attack incidents, the platform is carrying out multiple recovery efforts, including rolling back state, tracking funds, patching vulnerabilities, auditing contracts, and communicating with the community. This incident resulted in large-scale sell-offs and abnormal account withdrawals.

The decentralized derivatives platform Hyperliquid’s liquidity vault HLP suffered an estimated loss of about $1.5 million. The attacker used the low-liquidity token FARTCOIN to carry out a “suicide liquidation” attack, systematically triggering the ADL mechanism and forcing HLP to absorb the losses. On the surface, the vault’s books show a loss of $3 million. This incident reveals weaknesses in the ADL mechanism in low-liquidity markets; the attacker could also be profiting by hedging at the same time, indicating that the operation looks more like arbitrage than sabotage.

Phantom Wallet experienced a malfunction during the airdrop period, causing abnormal token prices and account balances to appear. Although the assets are safe, users suffered transaction losses, leading to compensation requests and a crisis of trust. The incident also heightened concerns about blockchain security, and some malicious actors may take advantage of the chaos to launch phishing attacks. While the technical issue has been fixed, improvements are still needed to the user experience and system stability.

Phantom Wallet experienced a malfunction during the token airdrop, causing abnormal token prices and account balances to be displayed. Although the assets were safe, users suffered transaction losses, prompting compensation requests and a crisis of trust. The incident also heightened concerns about blockchain security, and some bad actors may use the chaotic situation to launch phishing attacks. While the technical issues have been fixed, improvements are still needed for the user experience and system stability.

Bitcoin Depot was hit by a security vulnerability on March 23, 2023. The hacker gained access to the IT system to steal login credentials, and without authorization transferred about 50.9 bitcoins, resulting in losses of approximately $3.67M. The incident did not affect customers’ personal data, showing the security challenges faced by Bitcoin ATM operators. This was the company’s second known major security incident, reflecting its need for stronger security measures under regulatory pressure.

On-chain analyst 0xMacroGuy noted that Hyperliquid HLP lost approximately $1.2 million due to a takeover by a malicious actor of a large Fartcoin long position, representing about a 0.35% drawdown. The attacker intentionally incurred losses after establishing a large amount of leverage, causing HLP to absorb greater losses. HLP’s current TVL is $420 million, and its APR over the past month was 0%.

Bitcoin ATM operator Bitcoin Depot recently filed a report with the U.S. SEC, saying it was hit by a cyberattack on March 23 in which hackers stole approximately 50.9 BTC valued at about $3.665 million. The company has initiated an emergency response and investigation. Its customer platform and data were not affected, but it may face reputational and legal costs.