ParaSwap

Layerswap — a bridge between centralized crypto exchanges and layer-2 blockchains — regained access to its domain after a short-lived hijack drained roughly $100,000 of user funds.&nbsp;
On March 20, at around 19:40 UTC, the layerswap.io domain was <a href="https://discord.com/channels/890902720167440385/890968369736597545" target="_blank" rel="noopener nofollow">compromised</a>, and users trying to access the service were redirected to a phishing website. Moments later, the hacker attempted to reset Layerswap’s X account, which locked out access to the social media account completely.
According to Layerswap, domain registrar GoDaddy’s sluggish intervention allowed the hacker to retain longer control of the domain. At around 11:07 pm UTC, LayerSwap regained the ability to log into their GoDaddy account and reset the changes made by the hacker. The company stated: 
<blockquote data-ct-non-breakable="true">
 “In pursuit of understanding how the breach occurred, we engaged with GoDaddy support for explanations but were left without concrete answers. We agreed to receive a detailed report via email, which we plan to share with our community for transparency.”
</blockquote>
The elaborate Layerswap phishing scam managed to drain approximately $100,000 in crypto assets from roughly 50 users. The platform plans to fully refund the affected users and reward an additional 10% as compensation for the inconvenience caused.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-03/47bf29c2-6d51-4b77-a939-73953b1353e8.jpeg" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://twitter.com/layerswap/status/1770614459016372723" target="_blank" rel="noopener nofollow">Layerswap&nbsp;</a>
 </figcaption>
</figure>
Investors are advised to revoke their token approvals to prevent further loss of funds and claim lost funds and assets. Layerswap has now started refunding affected users.
Layerswap did not immediately respond to Cointelegraph’s request for comment.
Related: <a href="https://cointelegraph.com/news/godaddy-ens-dns-eth-free-pairing">GoDaddy to charge $0 for ENS .eth name pairing</a>
Along a similar timeline, decentralized finance (DeFi) aggregator ParaSwap prevented a colossal loss of funds stemming from a vulnerability present in its newly deployed Augustus v6 contract.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-03/7eb9878e-b47f-4f2e-9b70-c434e08559b8.png" alt="" title="">
 <figcaption style="text-align: center;">
 ParaSwap identified 386 wallet addresses being affected by the Augustus v6 contract vulnerability. Source: paraswap.notion.site
 </figcaption>
</figure>
Despite ParaSwap’s efforts to roll back the v6 contract and inform users to take necessary steps, the hacker managed to cash out funds worth roughly $24,000 from four different addresses.
In total, 386 addresses were affected by the vulnerability. The protocol also asked users to report any loss of funds that may have gone unidentified during the preliminary investigation.
Affected users remain at risk as long as they haven’t revoked their approvals, and ParaSwap recommends individuals use exploit checker services like Revoke to confirm their safety. 
Magazine: <a href="https://cointelegraph.com/magazine/bitcoin-etf-coinbase-honeypot-hackers-government-trezor-ceo/">Bitcoin ETFs make Coinbase a ‘honeypot’ for hackers and governments: Trezor CEO</a>

Layerswap overrides website hack that drained $100K

Cointelegraph

Other articles published on Mar 21, 2024

Explosive Growth in the Tokenized US Government Bonds Sector

Bitcoin Rallies After Fed Announcement; $151.69M Shorts Liquidated

Shiba Inu’s Ambitious Challenge to Topple Dogecoin’s Meme Coin Throne

Max Keiser Reiterates $400,000 Bitcoin Prediction

Arweave Price Prediction 2024, 2025, 2026-2030: Will It Cross The $100 Milestone?

EDF Group’s Exaion becomes Chiliz Chain validator node

Join our free newsletter for daily crypto updates!