Mozaic

Ethereum

2024

Arbitrum

Mozaic Finance, a decentralized finance (<a href="https://crypto.news/defi-trends-developments/">defi</a>) platform, suffered a security breach leading to a loss of $2.4 million. 
The heist, which was traced back to a compromise in their private key infrastructure, underscores the escalating worries regarding security within the global defi ecosystem. 
The breach, which caused a $2.4 million loss, targeted the <a href="https://crypto.news/arbitrum-reducing-gas-fees-dencun/">Arbitrum</a> chain on Mozaic, a layer 2 scaling solution for Ethereum (<a href="https://crypto.news/price/ethereum/">ETH</a>) designed to enhance scalability and efficiency. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 https://twitter.com/Mozaic_Fi/status/1768754080271196178 
 </div>
</figure> 
Per a comprehensive <a href="https://twitter.com/CertiKAlert/status/1768597420080848922?t=YVldeUxTae5UDqUaUE8Q8g&amp;s=19" target="_blank" rel="noopener">report</a> from CertiK, the breach stemmed from a targeted compromise of a private key, a crucial security element in blockchain systems. 
Exploiting this vulnerability, the attacker illicitly conducted transactions via the “bridgeViaLifi” contract, typically restricted to developer wallets. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 https://twitter.com/CertiKAlert/status/1768597420080848922 
 </div>
</figure> 
Upon analyzing blockchain data, it was found that an account with the suffix “50eb” <a href="https://arbiscan.io/tx/0x52b78eec8556c24513f92e8344c069fca6a48ec2ae829e5508333ad416d726f4" target="_blank" rel="noopener">initiated</a> the malicious activity, resulting in 27 token transfers, each involving significant sums of stablecoins. 
Significantly, a notable fraction of these funds were tracked back to the original account, resulting in a cumulative loss surpassing $2 million. This event serves as a clear reminder of the resourcefulness and tenacity of attackers focused on the defi sector. 
Following the attack, Mozaic Finance released a <a href="https://twitter.com/Mozaic_Fi/status/1768754080271196178?t=Qfun-bop1B7jewHhGs6xEw&amp;s=19" target="_blank" rel="noopener">statement</a>, acknowledging the breach and detailed their immediate actions. 
They revealed that all pilfered funds had been transferred to MEXC, a centralized cryptocurrency exchange, offering a glimmer of hope for asset recovery. 
With confidence in the legal process and centralized exchanges’ mechanisms for handling such incidents, they hinted at a potential avenue for reclaiming the stolen funds. 
Mozaic Finance’s proactive stance, alongside its collaboration with security experts and law enforcement, sets a precedent for defi platforms in addressing security breaches. 
This underscores the necessity of prompt action and transparency in mitigating the repercussions of such attacks on users and stakeholders. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 https://twitter.com/Mozaic_Fi/status/1768754080271196178 
 </div>
</figure> 
 You might also like: <a href="https://crypto.news/crypto-scammers-steal-from-uk-residents-15000-on-average-trm-labs-says/&nbsp; "> Crypto scammers steal from UK residents £15,000 on average, TRM Labs says </a> 
<h2 class="wp-block-heading" id="crypto-heists-private-key-vulnerability">Crypto heists, private key vulnerability </h2> 
Recent cybersecurity <a href="https://crypto.news/hackers-target-coinbase-binance-staff-with-phishing-clones-of-gmail-icloud/">incidents</a> in the defi space underscore the critical importance of safeguarding private keys to prevent unauthorized access and fund siphoning. 
Cybercriminals continue to target defi platforms, exploiting vulnerabilities to compromise security protocols and execute sophisticated attacks. 
Private key compromises have also emerged as a significant threat, with attackers leveraging various tactics to gain access to users’ passcodes and subsequently drain funds from platforms like PlayDapp and Unizen. 
A recent PlayDapp <a href="https://crypto.news/playdapp-breach-hack-crypto-290-million/">breach</a> amounted to over $290 million and marked one of the largest hacks in crypto history. The attack involved an unauthorized addition to the PLA token’s minting address, leading to substantial losses.&nbsp; 
Despite attempts to negotiate with the hacker and pause the smart contract, the attacker continued to exploit vulnerabilities, minting additional tokens and laundering funds through exchanges like Paribu and HTX. 
PlayDapp’s response included proposing a migration plan to introduce a new ‘PDA’ token with improved security features like multi-signature implementation. 
On March 11, Unizen — another defi protocol — also suffered a <a href="https://crypto.news/unizen-to-reimburse-victims-after-2-1-million-defi-breach/">hack</a> resulting in approximately $2 million in losses. The breach exposed a critical “external call vulnerability” in one of Unizen’s smart contracts, allowing unauthorized access for fund theft. 
To address the aftermath, Unizen CEO Sean Noga pledged personal funds to cover 99% of the losses for affected users, demonstrating a commitment to restitution and platform security enhancements. 
 Read more: <a href="https://crypto.news/crypto-plays-endemic-role-in-organized-crimes-londons-police-say/&nbsp; "> Crypto plays ‘endemic role’ in organized crimes, London’s Police say </a>

Defi protocol Mozaic Finance suffers $2.4m heist

Table of Contents

crypto.news

Other articles published on Mar 16, 2024

Trader Misses $1 Million Jackpot by a Day in Frog-Themed Memecoin Frenzy on Solana Network

Google Introduces Gemma: A Breakthrough in AI Safety and Performance

Can AI-Powered Conservation Efforts Save Endangered Species from Extinction?

Bitcoin Tumbles as U.S. Bond Yields Rise and Fed Decision Nears

Sam Bankman-Fried’s Complex Strategy: Jail Break, Redemption, GOP Alliance

Don’t Miss Out: Buy BEFE Coin for Potential Future Gains

Join our free newsletter for daily crypto updates!