Web3 Hacks

galachains 3m breach how 55 days of failed transactions became an atta On the very first try, 56 out of 59 account-token pairs were emptied down to the exact balance. Not close to it. To the decimal.

GalaChain’s $3M Breach: How 55 Days of Failed Transactions Became an Attacker’s Skeleton Key

a 7 8m safe wallet drain and the bot that stole it from the thief 1 Roughly 2,900 rsETH — about $7.8 million — left a Gnosis Safe wallet on Ethereum on Tuesday. The person who discovered the flaw ended up with none of it.

A $7.8M Safe wallet drain, and the bot that stole it from the thief

symbiosis bridge hit with a 262 sybtc mint 15 btc clawed back lps left without numbers Around 04:28 UTC on Sep. 11, Symbiosis's BridgeV2 accepted a transaction it read as correctly signed and issued roughly 2^62 raw units of syBTC to a wallet that had been spun up only minutes before on BNB Chain. Security firm Blockaid laid out that sequence, and the figure represents trillions of times more synthetic bitcoin than any real deposit could ever collateralize.

Symbiosis bridge hit with a 2^62 syBTC mint — 15 BTC clawed back, LPs left without numbers

nes is trading again on binance and kraken under two recovery rulebooks that barely agree On a single day, two exchanges switched the same token back on using two entirely different rulebooks. And neither rulebook says a word about the tokens held in your own wallet.

NES Is Trading Again on Binance and Kraken — Under Two Recovery Rulebooks That Barely Agree

allbtcs backing cracks osmosis freezes 22 65 btc over nomic bridge double spend A total of 22.65 BTC now sits frozen on Osmosis. Yet even in the best case, where governance claws back every last satoshi, the community pool would still be on the hook for roughly 17.19 BTC to restore the asset in full.

allBTC’s Backing Cracks: Osmosis Freezes 22.65 BTC Over Nomic Bridge Double-Spend

liquid network frozen after 320m bitcoin peg out and the whitehat wont return it until every node is patched Blockchain security firm Bitslab points to one figure worth dwelling on: at least 11 of Liquid's 15 functionaries put their signatures on the transaction. No key was stolen, in other words. Eleven separate signers reviewed the same withdrawal, and every one of them approved it.

Liquid Network frozen after $320M Bitcoin peg-out — and the whitehat won’t return it until every node is patched

trezors breach count balloons to roughly 80000 after a vendors deleted files turned up On Sept. 4 the size of Trezor's data breach multiplied by roughly six, and the cause was about as unglamorous as security failures get: a vendor claimed the files had been erased, and they hadn't been.

Trezor’s Breach Count Balloons to Roughly 80,000 After a Vendor’s “Deleted” Files Turned Up

sand bridge drained via legacy token function the sandbox post mortem finds claims open next week In Brief:

SAND bridge drained via legacy token function, The Sandbox post-mortem finds — claims open next week

cronos freezes block production after 75m tectonic exploit strands fun In Brief:

Cronos Freezes Block Production After $75M Tectonic Exploit Strands Funds Chain-Wide

stale rain contract bleeds 1 1m across crypto card programs avici sinks 49 Forget the $1.1 million figure for a moment. The number to sit with is $500,800 — the amount drained from 1,685 Avici users, all because a contract version nobody had gotten around to retiring was still live.

Stale Rain contract bleeds $1.1M across crypto card programs — AVICI sinks 49%

Crypto Games, Tokens & NFT Analytics Data provided by CryptoGames.GG