Token

Tornado Cash

Read

Tornado

According to CertiK, the TIME token was exploited recently, resulting in a loss of approximately $188k.&nbsp; 
The attack began with the exploiter converting 5 <a href="https://crypto.news/price/ethereum/">ETH</a> to Wrapped Ether (WETH), and then trading this for over 3.4 billion TIME tokens. 
CertiK analysts reported that the exploit’s root cause was the manipulation of the Forwarder contract, which is designed to execute transactions from any address. The <a href="https://crypto.news/kyberswap-hacker-moves-338k-into-tornado-cash/">attacker</a> crafted a request with a falsified sender address, which they controlled, and a matching signature. This deceptive req passed the Forwarder contract’s verification process. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <a href="https://twitter.com/hashtag/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener">#CertiKSkynetAlert</a> 🚨 TIME Token was exploited for ~$188k due to a recently disclosed vulnerability around ERC2771 and Multicall See our in-depth analysis on the TIME exploit below<a href="https://t.co/NF8UPcRPfQ" target="_blank">https://t.co/NF8UPcRPfQ</a> <a href="https://t.co/MGDnmFd56d" target="_blank">https://t.co/MGDnmFd56d</a>— CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1733144963792191604?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">December 8, 2023</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
The attacker leveraged a <a href="https://www.certik.com/resources/blog/5SXRcPGmshARXGrWxfgsAv-time" target="_blank" rel="noopener">parsing error</a>, where the TIME contract was deceived into recognizing an attacker-controlled address as legitimate. As a result, the TIME contract erroneously burned a massive amount of tokens from the target pool controlled by the attacker, rather than the intended address. 
 You might also like: <a href="https://crypto.news/kyberswap-hacker-moves-338k-into-tornado-cash/"> KyberSwap hacker moves $338k into Tornado Cash </a> 
The attacker burned over 62 billion TIME tokens, leading to a drastic reduction in the token pool. The tokens were then exchanged for a substantial amount of WETH, eventually converting these back to ETH, including a portion used for a bribe in the process. 
This incident highlights the underlying vulnerabilities in smart contracts, where even a minor error can lead to substantial financial losses.&nbsp; 
 Read more: <a href="https://crypto.news/kronos-research-negotiates-with-hacker-over-26m-theft/"> Kronos Research negotiates with hacker over $26m theft </a>

Smart contract exploit in TIME token leads to $188k loss

crypto.news

Other articles published on Dec 8, 2023

Historic Ordinal Sale Sets Record: 8th Inscription Fetches 10.4 BTC

Fidelity Director: Holding Little Bitcoin “Could Go A Long Way”

Uniswap Crypto Price Prediction: Will UNI be Bullish in 2024?

LayerZero confirms 2024 token launch, planning an airdrop

How Bitcoin, Solana eased market pressure on its price predictions

Cryptocurrency Exchanges Increase Alternatives as Bitcoin Price Stabilizes Above $40,000

Join our free newsletter for daily crypto updates!