Tag: dns hijacking

SlowMist Reports Surge in Diverse Crypto Security Incidents for the Week of September 17-23, 2023

Key Takeaways

Total security incidents reported: 7

Estimated financial loss: Approximately $380,600

Notable trend: Increase in phishing attacks and rug pull tactics

New attack methods: DNS hijacking, contract vulnerability, and phishing attempts

Breakdown of Incidents

Phishing Attacks:

Unimevbot users were targeted through malicious MEV bot codes on the website. The exact loss remains undisclosed, but funds were transferred to the hacker’s on-chain address.

Coinbase Wallet also fell victim to a phishing attack that exploited the Web3 messaging network protocol. The exact financial impact is yet to be reported.

Contract Vulnerabilities:

Linear Finance exposed its $LUSD token to an exploit attack due to a contract vulnerability. No specific loss has been reported.

Rug Pulls:

BNBpay and YZER were involved in rug pull incidents, with losses amounting to approximately $114,000 and $28,600, respectively, following significant liquidity removals.

DNS Hijacking:

Balancer was targeted in a DNS hijacking attack by a phishing group known as AngelDrainer, resulting in a loss of around $238,000.

Infrastructure Vulnerability:

An unspecified infrastructure vulnerability led to significant funding and team token loss for a project named “None.” The exact financial impact remains undisclosed.

Conclusion

The Slowmist report underscores the increasing complexity and diversity of attacks in the crypto and blockchain landscape. SlowMist urges users to remain vigilant and adopt comprehensive security strategies.

SlowMist Report: 10 Crypto Incidents Unveiled

The blockchain and cryptocurrency domain continues to battle against a variety of security threats, as elucidated in the SlowMist Weekly Security Report for the period October 1 – October 7, 2023. The report sheds light on ten distinct security incidents impacting entities across the spectrum, from individual token ventures to large-scale platforms, underlining the financial toll exerted by these attacks.

Statistical Overview

Total Security Incidents: 10

Noteworthy Trend: A surge in DNS Hijacking Attacks and Discord compromises.

Severe Impact: Stars Arena bearing the brunt with a loss approximating $3,000,000.

Incident Breakdown

1. Galxe (2023-10-06): A case of unauthorized access via DNS hijacking led to the misappropriation of visitors’ funds, affecting 1,120 users, with a financial fallout of around $270,000.

2. MCT (2023-10-06): DNS domain hijacking unfolded, enabling the potential upload of private keys to a fraudulent domain. Though the loss remains undisclosed, precautionary actions were advised.

3. Fake CommEx token (2023-10-06): An orchestrated liquidity withdrawal in a rug pull scenario saw the deployer walking away with approximately $154,000.

4. Friend.tech (2023-10-05): Four users were subjected to SIM card swap attacks, resulting in a collective loss nearing $385,000.

5. Stars Arena (2023-10-05): A glaring security breach within the platform’s smart contract framework led to a heist of about $3,000,000.

6. DePay (2023-10-05): The platform endured a flash loan attack, albeit with a relatively minor loss of $827.

7. Metropolis World (2023-10-05): The compromise of the platform’s Discord server was reported, though the loss hasn’t been quantified.

8. GEMIE (2023-10-02): A hack on the Discord server led to the distribution of phishing links. The users were cautioned against interaction, with the loss yet to be specified.

9. VendX (2023-10-02): Similar to Metropolis World and GEMIE, VendX’s Discord server fell prey to compromising activities.

10. Fake EigenLayer Token (2023-10-01): An exit scam on a counterfeit token resulted in a windfall for the deployer, with losses accumulating to around $300,000.

Recommendations

In light of the persistent menace of social engineering and phishing forays, coupled with smart contract vulnerabilities, the crypto community is urged to exercise vigilance. The diverse nature of the attacks spotlighted this week emphasizes the indispensability of robust, multi-faceted security strategies. While certain entities suffered crushing financial setbacks, others showcased prompt response mechanisms to curb potential damages. The report accentuates that regular testing and updates, alongside cautious interaction with digital platforms, are cardinal in diluting security risks.

Exit mobile version