Mixin

Source: AdobeStock/Roman Samokhin 
Interoperable blockchain network Socket has announced the retrieval of 1,032 Ether tokens worth $2.3 million. 
Announcing this development on X (formerly Twitter), the protocol revealed that these digital funds were linked to the January 16 Bungee Bridge exploit, which resulted in the theft of millions of dollars. 
FUND RECOVERY UPDATE 
We have successfully recovered 1032 ETH from the funds involved in the incident on 16th Jan. 
We will release a recovery &amp; distribution plan for users soon. 
Big shoutout to everyone who helped us from Seal911, Slowmist, Hexagate, &amp; others:<a href="https://twitter.com/samczsun?ref_src=twsrc%5Etfw">@samczsun</a>… 
— Socket (@SocketDotTech) <a href="https://twitter.com/SocketDotTech/status/1749734794320363802?ref_src=twsrc%5Etfw">January 23, 2024</a> 
The Socket team has affirmed its commitment to releasing a comprehensive recovery and distribution plan for affected users in the near future. 
The cyberattack was initially flagged by a user on X, @spreekway, who noted that significant amounts of money had been siphoned off through the Socket/Bungee bridge exploit. 
Socket/Bungee approval being exploited rn. several million already gone. attack is ongoing <a href="https://t.co/8C25GBPeuo">pic.twitter.com/8C25GBPeuo</a> 
— Spreek (@spreekaway) <a href="https://twitter.com/spreekaway/status/1747337879771033632?ref_src=twsrc%5Etfw">January 16, 2024</a> 
Providing additional details about the <a href="https://cryptonews.com/news/cybersecurity-risks-in-the-cryptocurrency-industry-2.htm">cyberattack</a>, the interoperability protocol explained that it impacted crypto wallets with infinite approvals to its smart contracts. 
Meanwhile, blockchain security analytics firm Peckshield documented the incident, estimating the overall loss to be around $3.3 million. 
Peckshield also disclosed that the malicious route exploited by the actor was added three days prior, and the Socket protocol has since taken measures to deactivate it. 
Delving deeper into the details, the analytics firm noted that the success of the bad actor was largely due to incomplete validation of user input. 
Today's hack on <a href="https://twitter.com/SocketDotTech?ref_src=twsrc%5Etfw">@SocketDotTech</a> results in the loss of &gt;$3.3m. 
The bad route exploited in the hack was added 3 days ago and is now disabled. Here are related txs: – add route tx: <a href="https://t.co/lxw7iA1kn4">https://t.co/lxw7iA1kn4</a> – disable route tx:<a href="https://t.co/QMHfI4YeuU">https://t.co/QMHfI4YeuU</a> 
The hack is due to… <a href="https://t.co/QdBBgVF287">https://t.co/QdBBgVF287</a> <a href="https://t.co/yNxF5vCwax">pic.twitter.com/yNxF5vCwax</a> 
— PeckShield Inc. (@peckshield) <a href="https://twitter.com/peckshield/status/1747353782004900274?ref_src=twsrc%5Etfw">January 16, 2024</a> 
This vulnerability provided an ideal avenue for the hacker to pilfer funds from users who had previously approved the vulnerable SocketGateway smart contract. 
<h2 id="crypto-losses-still-prevalent">Crypto Losses Still Prevalent</h2> 
 The <a href="https://cryptonews.com/cryptocurrency/what-is-cryptocurrency/">cryptocurrency</a> space has been a focal point for malicious activities ever since it gained prominence in 2021, with state-backed cybercriminals like the Lazarus Group making off with millions in investor funds. 
Tracking crypto losses for 2023, leading bug bounty platform Immunefi reported <a href="https://downloads.ctfassets.net/t3wqy70tc3bv/ItxhGk5tgb1sj3DCC4ZoA/e3be78485ac665f585b77643d5dee001/Immunefi_Crypto_Losses_Final.pdf">over $1.8 billion</a> in losses within the nascent industry. 
Immunefi also <a href="https://cryptonews.com/news/immunefis-november-crypto-losses-show-343m-lost-to-frauds-and-hacks-cefi-platforms-account-for-53-losses.htm">disclosed that hacking incidents</a> had the most significant impact on blockchain-backed protocols. Hackers were able to cart away $1.7 billion across 247 separate incidents. On the other hand, $103.4 million was lost to crypto frauds across 110 specific incidents. 
While this figure might seem quite proportionate, the platform revealed that the crypto losses for 2023 were 54.2% less than the approximate $4 billion value hackers and fraudsters carted away in 2022. 
The Mixin Network and Euler Finance suffered the highest losses, totaling $397 million, representing 22% of the overall losses in 2023. 
The notorious <a href="https://cryptonews.com/news/north-koreas-lazarus-group-moves-1-2m-bitcoin-from-coin-mixer-to-holding-wallet.htm">Lazarus Group</a>, backed by the North Korean government, stole a combined $308.6 million throughout the year in five different incidents, targeting Atomic Wallet, CoinsPaid, Alphapo, Stake, and CoinEx. 
Meanwhile, the <a href="https://cryptonews.com/news/introduction-decentralized-finance-defi.htm">decentralized finance</a> (DeFi) ecosystem was the most impacted as the permissionless digital token marketplace was the subject of 77.3% successful exploits, compared to 22.7% on <a href="https://cryptonews.com/exclusives/defi-vs-cefi-difference-between-decentralized-centralized-finance.htm">centralized finance</a> (CeFi) platforms. 
Among blockchain networks, the Ethereum and BNB Chain were the most exploited blockchain protocols, with a combined figure of 228 specific incidents targeted at both networks.

Socket Retrieves $2.3M in ETH Following Bungee Bridge Exploit

Table of Contents

Cryptonews.com

Other articles published on Jan 23, 2024

Drift Protocol Introduces Points Reward Program

Top Cryptocurrency Under $1 to Invest in Right Now Before It Surges

Stock Market Rises While Bitcoin Continues Downward Trend

Bitcoin Price Has Continued To Fall, Dropping Below $40,000

Nearly $580K drained with Cointelegraph, Wallet Connect fake airdrop

Ripple's XRP at a Crossroads: Buy Signals and Bearish Trends in Focus

Join our free newsletter for daily crypto updates!