1. Home
  2. Cyvers

Cyvers

DeFi Platform Hacked for at Least $1,900,000 and Possibly More on Ethereum and Arbitrum Blockchains

DeFi Platform Hacked for at Least ,900,000 and Possibly More on Ethereum and Arbitrum Blockchains

A decentralized finance (DeFI) protocol has been hacked to the tune of millions of dollars over the Ethereum (ETH) and Arbitrum (ARB) blockchains. In a new announcement, cybersecurity firm Cyvers says that DeFi platform Hedgey Finance has been breached by bad actors who took at least $1.9 million worth of funds that were converted to […]

The post DeFi Platform Hacked for at Least $1,900,000 and Possibly More on Ethereum and Arbitrum Blockchains appeared first on The Daily Hodl.

Uniswap responds to SEC Wells notice: ‘We are ready to fight’ for DeFi

Prisma Finance Suffers $11.6M Hack in Liquid Staking Shockwave, Moves to Mitigate Fallout

Prisma Finance Suffers .6M Hack in Liquid Staking Shockwave, Moves to Mitigate FalloutThe decentralized finance (defi) entity, Prisma Finance, has fallen prey to a security breach, with onchain detectives revealing that $11.6 million has been pilfered from its liquid staking protocol. Prisma Finance in Turmoil: $11.6M Lost to Hackers, Emergency Measures Activated On a recent Thursday, blockchain surveillance and safety squads from Peckshield and Cyvers reported the […]

Uniswap responds to SEC Wells notice: ‘We are ready to fight’ for DeFi

How the Ledger Connect hacker tricked users into making malicious approvals

According to Cyvers, the attacker caused malicious code to be inserted into multiple app user interfaces, allowing the exploiter to fool users into confirming transactions.

The ‘Ledger hacker’ who siphoned away at least $484,000 from multiple Web3 apps on Dec. 14 did so by tricking Web3 users into making malicious token approvals, according to the team behind blockchain security platform Cyvers.

According to public statements made by multiple parties involved, the hack occurred on the morning of Dec. 14. The attacker used a phishing exploit to compromise the computer of a former Ledger employee, gaining access to the employee’s node package manager javascript (NPMJS) account.

When a developer first writes their app, they usually install a connect kit through Node Package Manager (NPM). After creating a build and uploading it to their site, their app will contain the connect kit as part of its code, which will then be downloaded into the user’s browser whenever the user visits the site.

Read more

Uniswap responds to SEC Wells notice: ‘We are ready to fight’ for DeFi

Over $100,000,000 in Ethereum, Shiba Inu, Chainlink and Other Crypto Assets Drained From Justin Sun-Linked Firms

Over 0,000,000 in Ethereum, Shiba Inu, Chainlink and Other Crypto Assets Drained From Justin Sun-Linked Firms

New data reveals that hundreds of millions of dollars worth of altcoins have been drained from firms linked to Tron (TRX) founder Justin Sun. According to data from blockchain tracker Lookonchain, during the past 20 days, five major hacks have occurred, totaling $290 million worth of stolen funds. Two of the protocols hit – crypto […]

The post Over $100,000,000 in Ethereum, Shiba Inu, Chainlink and Other Crypto Assets Drained From Justin Sun-Linked Firms appeared first on The Daily Hodl.

Uniswap responds to SEC Wells notice: ‘We are ready to fight’ for DeFi