Uranium Finance

Wrapped BNB

BUSD

Tornado Cash

The Uranium Finance attacker has transferred 2.5 million BUSD from the BNB chain to Ethereum (<a href="https://crypto.news/price/ethereum/" rel="noopener noreferrer nofollow">ETH</a>) using Li.fi.
On Jan. 22, On-chain analytics platform PeckShield Alert reported the transfer of 2.5 million BUSD from the BNB Chain to Ethereum, leveraging the Li.fi protocol, a DEX aggregator. This movement involved the conversion of assets to 812 ETH and approximately $500,000 in stablecoins.
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#PeckShieldAlert</a> <a href="https://twitter.com/hashtag/UraniumFinance?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#UraniumFinance</a> Exploiter- labeled address has bridged 2.5M <a href="https://twitter.com/search?q=%24BUSD&amp;src=ctag&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">$BUSD</a> from <a href="https://twitter.com/hashtag/BNBChain?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#BNBChain</a> to <a href="https://twitter.com/hashtag/Ethereum?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#Ethereum</a> via Li[.]fi The Ethereum address has received 812 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">$ETH</a> and ~$505.5K in stablecoin <a href="https://t.co/EZXZwJYTxK" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/EZXZwJYTxK</a>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1749324083698024491?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">January 22, 2024</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
Originating from the notorious <a href="https://crypto.news/defi-project-uranium-finance-50-million-hackers/" rel="noopener noreferrer nofollow">Uranium Finance hack</a> in April 2021, the primary address associated with the incident transferred a total of $3.1 million in BUSD to Ethereum. Peck Shield’s initial report indicated the movement of $10,000 BUSD via Stargate, a cross-chain bridging protocol. Further tracking revealed additional transfers totaling 3.1 million BUSD.
The attacker’s strategy involved <a href="https://crypto.news/uranium-hacker-starts-laundering-50m-plunder-almost-two-years-later/" rel="noopener noreferrer nofollow">distributing </a>500,000 BUSD across six transactions and 100,000 BUSD in another. The batch of transactions, executed within an hour, sparked discussions in the crypto community.
The exploiter’s BNB Chain address held over $15 million in assets, comprising BUSD and Wrapped BNB (WBNB). At the time of writing, the <a href="https://bscscan.com/address/0x59d779BED4dB1E734D3fDa3172d45bc3063eCD69" target="_blank" rel="noopener noreferrer nofollow">wallet </a>was completely drained.
You might also like: <a href="https://crypto.news/north-korean-crypto-hackers-raided-600m-in-2023/" rel="noopener noreferrer nofollow"> North Korean crypto hackers raided $600m in 2023 </a>
Additionally, the Ethereum address of the exploiter boasted holdings of 824 Ether, valued at $1.3 million at the time, along with smaller amounts of USDC and USDT. Notably, soon after the BUSD transfer to Ethereum, 1,200 ETH (valued at $1.89 million) were <a href="https://etherscan.io/address/0x59d779bed4db1e734d3fda3172d45bc3063ecd69" target="_blank" rel="noopener noreferrer nofollow">moved </a>to Tornado Cash, a cryptocurrency mixer. This was executed through 12 transactions of 100 ETH each.
These activities aligned with a pattern observed throughout the year, including several transfers to <a href="https://crypto.news/tag/tornado-cash/" rel="noopener noreferrer nofollow">Tornado Cash</a> in the preceding months. The first of these occurred in March, involving a different address to move 2,250 ETH to the mixer. In total, the exploiter extracted $50 million in crypto assets by exploiting a flaw in the pair contracts of the protocol.
On a related note, 2024 has witnessed increased <a href="https://crypto.news/tether-addresses-un-claims-on-illicit-activity-involving-usdt/" rel="noopener noreferrer nofollow">illicit cryptocurrency activities</a>. A notable phishing attack, <a href="https://twitter.com/realScamSniffer/status/1749224072180039887?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1749224072180039887%7Ctwgr%5Efd767e551c2a8209d64a5440cb94e78c7053e443%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fcryptotale.org%2F4-20-million-lost-in-ethereum-phishing-scam-create2-exploited%2F" target="_blank" rel="noopener noreferrer nofollow">reported </a>by Scam Sniffer, resulted in a $4.20 million loss for the victim. The scam exploited ERC20 Permit signatures, allowing scammers access to the victim’s assets.
Read more: <a href="https://crypto.news/coingeckos-x-accounts-breached-by-hackers/" rel="noopener noreferrer nofollow"> CoinGecko’s X accounts breached by hackers </a>

Uranium Finance hacker executes $2.5m BUSD transfer to Ethereum

crypto.news

Other articles published on Jan 22, 2024

Cardano: Did ADA follow its high developmental activity?

ChainGPT Pad’s Weekly Roundup 01.13. - 01.19.

Asia is on fire (We burnt 1 Million ASIA)

Polkadot (DOT) Experiences Double-Digit Decline Amid Reduced Blockchain Activity

Analyst Warns BTC Price Will Remain Flat as $25 Billion GBTC Liquidation Looms, Galaxy Digital Fo...

No SHIB, BONE Airdrops: Shiba Inu Community Gets Urgent Warning

Join our free newsletter for daily crypto updates!