2024

Radiant

Radiant Capital

Read

<p class="is-style-lead">Fraudsters have breached the security system of the Socket cross-chain protocol.</p> 
<p>A security breach of the Socket protocol has led to the loss of millions in crypto after a hacker made use of a verification user input to steal users funds. </p> 
<p>Information about the hack appeared on the project’s <a href="https://twitter.com/SocketDotTech/status/1747349422730813525" target="_blank" rel="noopener">microblog</a>.</p> 
<blockquote class="wp-block-quote"> 
 <p>“Socket has experienced a security incident that affected wallets with infinite approvals to Socket contracts. We have identified the issue &amp; have paused the affected contracts.”</p> <cite>Socket team</cite>
</blockquote> 
<p>PeckShield confirmed that at least $3.3 million was affected. They noted that the hack occurred due to incomplete verification of user input, which is used to steal funds from users who approved the vulnerable SocketGateway contract on the site.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Today's hack on <a href="https://twitter.com/SocketDotTech?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@SocketDotTech</a> results in the loss of &gt;$3.3m. <br><br>The bad route exploited in the hack was added 3 days ago and is now disabled. Here are related txs: <br>– add route tx: <a href="https://t.co/lxw7iA1kn4" target="_blank">https://t.co/lxw7iA1kn4</a><br>– disable route tx:<a href="https://t.co/QMHfI4YeuU" target="_blank">https://t.co/QMHfI4YeuU</a><br><br>The hack is due to… <a href="https://t.co/QdBBgVF287" target="_blank">https://t.co/QdBBgVF287</a> <a href="https://t.co/yNxF5vCwax" target="_blank">pic.twitter.com/yNxF5vCwax</a></p>— PeckShield Inc. (@peckshield) <a href="https://twitter.com/peckshield/status/1747353782004900274?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">January 16, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>After discovering the problem, the developers suspended the protocol. As of the time of writing this review, Socket is working.</p> 
<p>The developers reported fixing the intelligent contracts that led to the exploit. The project team promised to return funds to all victims.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Socket is now operational again. <br><br>The affected contract has been paused and damage is fully contained. <br><br>Bridging on <a href="https://twitter.com/BungeeExchange?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@BungeeExchange</a> and most of our partner frontends has resumed. <br><br>A detailed post mortem and next steps will follow shortly.</p>— Socket (@SocketDotTech) <a href="https://twitter.com/SocketDotTech/status/1747444569812435267?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">January 17, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Since the beginning of the year, the cryptocurrency industry has already faced several security incidents. In early January, the Radiant Capital Lending Protocol <a href="https://crypto.news/radiant-capital-reports-4-5m-flash-loan-attack/">was hacked</a> for 1,900 ETH worth about $4.5 million. PeckShield explained that the attackers took advantage of the time window that appears during the activation of a new lending market.</p> 
<p>Orbit Bridge, a gateway bridge protocol, also <a href="https://crypto.news/cross-chain-protocol-orbit-bridge-suffers-exploit-losses-surpass-80m/">experienced</a> an unusual outflow of $81.5 million across multiple cryptocurrencies as a result of a major hack.</p> 
<p> Read more: <a href="https://crypto.news/crypto-hacks-in-december-push-total-losses-close-to-100m/"> Crypto hacks in December push total losses close to $100m </a> </p>

Socket cross-chain protocol breached, $3.3m in funds stolen

crypto.news

Other articles published on Jan 17, 2024

Bitcoin miners dump over $450 million in a day

Coinbase Court Clash with SEC: Judge Failla’s Stance May Shift Crypto Authority Balance

ViaBTC at the Center of a Major Bitcoin Transaction with Unusually High Fees

Will the WIF Meme Coin Rise in the Solana Network?

PEPE crashes as SUI pumps 40%; GFOX headed for $5M target

Bitcoin User Pays Staggering $174,000 Transaction Fee in Crypto Quirk

Join our free newsletter for daily crypto updates!