Get the weekly summary of crypto market analysis, news, and forecasts! This Week’s Summary The crypto market ends the week at a total market capitalization of $2,17 trillion. Bitcoin continues to trade at around $62,300. Ethereum experiences no changes and stagnates at around $2,400. XRP is down by 2%, Solana by 1%, and Dogecoin by 3%. Almost all altcoins are trading in the red, with very few exceptions. The DeFi sector decreased the total value of protocols (TVL) to around…
Hacker Phishes off $55 Million In DAI from Crypto Whale
A recent phishing attack targeting a prominent crypto whale has resulted in the theft of approximately $55 million worth of Dai tokens, drawing attention to the growing sophistication and frequency of cyberattacks within the Web3 ecosystem.
Attack Details
According to reports from blockchain analytics firm Lookonchain and cybersecurity experts at CertiK, the phishing scam was orchestrated by an entity identified as “Fake_Phishing187019.” The attacker successfully siphoned off 55,473,618 Dai tokens by exploiting vulnerabilities in externally owned accounts (EOAs). Similar to traditional bank accounts, these digital wallets can be compromised if not properly secured.
The breach occurred on August 20, 2024, at 5:40:47 PM UTC. The attacker deceived the victim into signing a seemingly benign transaction that, unbeknownst to the user, transferred ownership of DSProxy #166,776 to a known phishing address. This critical transaction set the stage for the subsequent theft of the Dai tokens.
Laundering Stolen Funds
Once the attacker gained control of the compromised vault, they swiftly minted and withdrew the stolen tokens. The stolen assets were then laundered through a series of complex transactions. The first phase involved transferring $36 million to an unknown address, followed by an additional $17.5 million routed through the CoW protocol.
In a bid to further obscure the trail, the hacker exchanged the stolen Dai tokens for Ethereum (ETH) and Bitcoin through Uniswap V3, a widely used decentralized exchange. This maneuver highlights the lengths to which cybercriminals will go to conceal their illicit gains, making it increasingly challenging for authorities to trace and recover the stolen assets.
The Inferno Drainer Exploit
CertiK’s analysis identified the phishing technique used in this attack as part of the broader “Inferno Drainer” category. This type of smart contract exploit manipulates transaction permissions, allowing attackers to redirect assets to addresses they control. Inferno Drainer tactics often involve embedding malicious code within contracts that appear legitimate, deceiving users into unknowingly granting access to their digital assets.
Growing Frequency of Cyber Attacks
The recent attack is part of a concerning trend in the Web3 space, where cyberattacks are becoming more frequent and sophisticated. The July 2024 report from CertiK painted a grim picture of the current security landscape, with losses amounting to $270.9 million from various breaches, hacks, and fraud incidents. Of this staggering amount, only $7.8 million was recovered, highlighting the challenges in combating these threats. The recent WazirX hack, which resulted in a $230 million loss, is a prime example of the sector’s vulnerability.
Furthermore, CertiK also reported that in the first half of 2024, almost $500 million were stolen through phishing attacks like the one that recently targeted the decentralized exchange and staking platform MonoSwap, which had to urge users to stop staking or deposit additional funds on the platform.
Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
Best 4 Cryptos to Watch Before the Next Bull Run in 2024: BlockDAG, PEPE, FLOKI, and DOGE
How Donald Trump, Elon Musk Can Kickstart The Next Crypto Bull Run?
Written by
More author posts
Publish your own article
Guest post article. Guaranteed publishing with just a few clicks
START PUBLISHING ADVERTISE WITH US