Posts

Showing posts with the label tornado cash

Tornado Cash funds ‘at risk’ after hacker injects malicious code

Deposits to notorious crypto privacy tool (and hacker-favorite) Tornado Cash may be at risk after malicious code was reportedly introduced to certain user interfaces. According to a report by ZeroTwoDAO, published on Sunday: “If you have deposited to Tornado Cash using IPFS gateways (like ipfs.io, cf-ipfs.com, eth.link), your note would likely be exposed and the deposited funds are at risk.” It looks like some Tornado Cash UIs (eg https://t.co/JlgMXo60xT) inject malicious code for 100 ETH deposits. Also, there are some suspicious proposals: – https://t.co/dgB7tQHThS – https://t.co/N147u0WTMW Investigation ongoing. pic.twitter.com/80ZqgdMCSJ — sudo rm -rf –no-preserve-root / (@pcaversaccio) February 24, 2024 Read more: DeFi has rough weekend with Aave and Tornado Cash chaos  The report goes on to explain that user interfaces hosted via the peer-to-peer Interplanetary File System (IPFS) contain ‘ malicious javascript code’ that was...

Mistake or money laundering? User pays $1.6 million for CrypToadz NFT

The purchase was funded from a digital wallet, which has been a part of the chain of transactions, anonymized by the Ethereum coin mixing service Tornado Cash One of the CrypToadz non-fungible tokens (NFTs), whose average price doesn’t exceed $1000, was bought for an astonishing 1,055 Wrapped Ethereum (WETH), an equivalent to $1.6 million.  The deal occurred on the OpenSea market on Oct. 9. The NFT represents “a small, warty, amphibious creature,” one of the 6969 units minted by the pseudonymous digital artist Gremplin. The CrypToadz collection was launched during the NFTs boom in 2021 and surpassed a trading volume of 12,000 ETH ($38 million ) during its first ten days on the market. The purchasing wallet was funded by a wallet that has been pulling money out of Tornado Cashhttps://t.co/nNhKvSVhoz pic.twitter.com/aInHO8vNyG — TexasHedge (@0xTexasHedge) October 9, 2023 However, the price paid by the anonymous user for the NFT raised questions among the community. Two weeks ago...

Arcadia Finance loses $455m in defi protocol hack

Image
Arcadia Finance, a decentralized finance (defi) protocol , has suffered a major setback, falling victim to a code exploit, resulting in a significant loss of approximately $455,000.  The breach was initially detected by blockchain security firm PeckShield, which identified a coding oversight related to untrusted input validation as the root cause of the vulnerability. Exploiting this coding loophole, a hacker managed to drain funds from Arcadia’s Ethereum and Optimism vaults, putting the defi protocol in a precarious position. #PeckShieldAlert Our community contributor has detected that @ArcadiaFi has been exploited on both #Ethereum and #Optimism for ~$455K The exploiter on #Ethereum was frontrun by 0x5C75e94dD0Ab9c10BFd1B8073DafEF031D3c050dhttps://t.co/blGx5IEAkk The exploiter on #optimism… pic.twitter.com/WDzF0XVcmL — PeckShieldAlert (@PeckShieldAlert) July 10, 2023 The company confirmed the breach on Twitter and suspended the affected contracts to minimize further ...