2024

Arbitrum

Uniswap

Terra

<div class="cryptonews">
 <p class="is-style-lead">The liquidity manager app Concentric experienced a significant security breach today on the Arbitrum network.</p>
 <p>The breach involved a <a rel="noopener noreferrer nofollow" title="social" href="https://thebittimes.com/tag/social.html">social</a> <a rel="noopener noreferrer nofollow" title="engineering" href="https://thebittimes.com/tag/engineering.html">engineering</a> attack that enabled the unauthorized acquisition of a critical private key. This key belonged to the protocol’s deployment account and was instrumental in the attack.</p>
 <p>During the incident, the perpetrator managed to manipulate the protocol by upgrading the vaults and creating new liquidity provider (LP) tokens. This series of actions ultimately led to the extraction of assets from the vaults.&nbsp;</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Exploiter is now targeting approvals on vaults, please revoke all approvals to these addresses:https://t.co/3vTEWu23BJ https://t.co/KlZo5PqjlI</p>— Concentric.fi (@ConcentricFi) January 22, 2024
   </blockquote>
  </div>
 </figure>
 <p>The breach was executed by gaining control of an employee’s deployer wallet on Arbitrum. The $1.7 million in stolen funds were converted into Ethereum and dispersed across three wallet addresses. Cybersecurity company Cyvers detected and reported suspicious activities following the incident, raising concerns within the decentralized finance community.</p>
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">ALERTOur AI system has detected multiple suspicious transactions involving $ARB on @ConcentricFi.<br><br>The attacker gained control of @ConcentricFi through <a rel="noopener noreferrer nofollow" title="social" href="https://thebittimes.com/tag/social.html">social</a> <a rel="noopener noreferrer nofollow" title="engineering" href="https://thebittimes.com/tag/engineering.html">engineering</a> tactics.<br>Subsequently, stolen funds were converted to $ETH and distributed across three distinct EOA.<br>The… pic.twitter.com/TW6pT0ES3H</p>— Cyvers Alerts (@CyversAlerts) January 22, 2024
   </blockquote>
  </div>
 </figure>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> CryptoPunk sells for $500K, NFT volume rallies 17%
 </div>
 <p>Further investigation into the attack revealed intriguing connections. Blockchain security firm CertiK identified a link between the wallet used in this breach and another involved in a previous exploit of the OKX decentralized exchange in December. This connection suggests the possibility of the same individual or group orchestrating both attacks.</p>
 <p>Liquidity management protocols, such as the one employed by Concentric, have gained traction in the defi sector. These protocols help in setting price boundaries and managing liquidity pools within decentralized exchanges.</p>
 <p>Their rise in popularity can be traced back to the introduction of the concentrated liquidity feature by Uniswap in 2021. This feature enables liquidity providers to define specific price ranges for asset trading, adding complexity to liquidity provision and thereby increasing reliance on management protocols for asset handling.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Terra developer Terraform Labs files for Chapter 11 bankruptcy
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/concentric-app-suffers-1-7m-social-engineering-hack-on-arbitrum-tbt77340.html">https://thebittimes.com/concentric-app-suffers-1-7m-social-engineering-hack-on-arbitrum-tbt77340.html</a></p>

Concentric app suffers $1.7m social engineering hack on Arbitrum

TheBitTimes

Other articles published on Jan 22, 2024

Voice Cloning Startup ElevenLabs Raises $80M in Series B Funding, Surpasses $1 Billion Valuation

Morgan Stanley Expects Crypto to Disrupt Global Financial System

Coinbase ($COIN) Stock Price Prediction Today January 22

Bitcoin: Traders turn to profit-taking as price declines and that means…

Solana Alternative Will Outpace SOL and Reach the Top 100 Coins in 2024

HT surges by almost 8% amid Huobi Token conversion start

Join our free newsletter for daily crypto updates!