zkSync

<![CDATA[<figure class="image"><img src="https://cimg.co/news/124667/329301/hacker-media-library-orig.jpeg" srcset="" width="" class="content-img" alt=""><figcaption>Source: Adobe / _Danoz</figcaption></figure>According to a recent X thread, it has recently come to light that an individual has orchestrated an incredibly sophisticated Sybil attack on <a href="https://cryptonews.com/news/defi-platform-eralend-zksync-loses-34-million-blockchain-exploit.htm">zkSync</a>, a layer-2 scaling solution for Ethereum.<figure class="media"><oembed url="https://twitter.com/lingland09/status/1700970363713167450?s=20"></oembed></figure>This Sybil attack has given this individual control over a staggering 21,877 wallets within the network.The individual's strategy involved a meticulously designed bot, which they utilized to execute various transactions within the zkSync network.Notably, these transactions were not manually conducted but automated by the bot. This level of automation allowed for a high degree of precision in the attack.One key aspect of this attack was the individual's ability to manipulate liquidity within the network. By adding liquidity themselves, this actor was able to evade issues related to slippage that might have otherwise occurred.Consequently, they could execute a series of transactions on the zkSync Era network with remarkable efficiency and cost-effectiveness.Furthermore, the individual behind this attack demonstrated a keen understanding of how to minimize costs. Despite accumulating an impressive volume of transactions across the 21,877 wallets, they managed to do so with minimal fees.This calculated approach involved spending only 1.5 to 2 USD worth of ETH fees per wallet. Moreover, the attacker executed transactions at different intervals, including various months, weeks, and days, to mimic the behavior of legitimate users and other layer-2 projects, making their activities appear less suspicious.However, it's important to note that despite the complexity of this Sybil attack, it did not go unnoticed. Lingland 09, a diligent observer in the crypto community, managed to track down a substantial portion of the 21,877 fake Sybil wallets created by the attacker.Unfortunately, zkScan Explorer only supports up to 1,000 pages of history for each contract, limiting the number of wallets Lingland 09 could document.Although the Matter Labs team, the developers behind zkSync, has not released any official notice about the attack, the community has urged the team to take action to identify and detect all 21,877 fake Sybil wallets associated with this individual's activities, mainly through the $gem token claim contract.<h2 id="surge-in-sybil-attacks-hits-crypto-community-airdrops-under-threat">Surge in Sybil Attacks Hits Crypto Community, Airdrops Under Threat</h2>The crypto community is witnessing a surge in Sybil attacks, with yet another airdrop falling prey to this nefarious tactic. This tactic involves generating numerous eligible wallets to claim the airdrop, promptly converting and profiting from the tokens.Connext, a cross-chain liquidity network, made waves with its xERC20 $NEXT token airdrop on August 17th.Connext introduced the <a href="https://forum.connext.network/t/community-sybil-filtering-program-announcement/373">Community Sybil Hunter program</a> to ensure fair distribution, drawing inspiration from projects like <a href="https://cryptonews.com/news/hop-protocol-rewards-sybil-hunters-with-innovative-airdrop-tool-how-does-it-work-1.htm">HOP</a> and SAFE.However, the spotlight has turned on Connext Network, a protocol enhancing security through native blockchain bridges, due to a suspected Sybil attack during the native token airdrop.A wallet created just four hours before the NEXT airdrop siphoned off over 200 claims for itself using multiple wallets, despite the airdrop's one-claim-per-wallet rule.According to <a href="https://debank.com/profile/0x44af5fcedfb77a2d9cb973b404e30fc27e666708/history">Debank data</a>, the wallet systematically swapped NEXT tokens for tether (USDT) and ether (ETH), accruing approximately $38,000 in profit shortly after the airdrop commenced.Moreover, the wallet inundated the airdrop's user interface with a deluge of requests, leading to a temporary outage, as confirmed by Arjun Bhuptani, a founding contributor at Connext.
]]>

Shocking Sybil Attack Uncovered: Individual Controls Over 21,000 Wallets on zkSync Network

Table of Contents

Cryptonews.com

Other articles published on Sep 12, 2023

Why Did XRP Retrace Despite Ripple’s Win? Expert Cites Liquidity as Key Factor

DOGE Price Analysis: Will DOGE Price Find Its Tail Under $0.050?

Exploring the Features of the Binance Exchange Platform

CZ Binance Predicts DeFi’s Domination Over CeFi in Next Bull Run

How to use Virtual Cards in MDAO Telegram Wallet

Zodia Custody brings digital asset custodial solution to Singapore

Join our free newsletter for daily crypto updates!