DeFi

ALEX Lab

Sonne Finance

when

Security

<p>The post <a href="https://coinpedia.org/news/crypto-hack-report-this-week-analyzing-recent-defi-hacks-and-security-breaches/">Crypto Hack Report This Week: Analyzing Recent DeFi Hacks and Security Breaches</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>The last week saw a bunch of high-profile cyberattacks on giant players in the cryptocurrency industry with a particular focus on DeFi platforms, crypto-hedge funds and other blockchain-based services.&nbsp;</p> 
<p>Join us in this week’s crypto hack report focusing on types of attacks, their methods of implementation, and the evaluation of response actions before and after the lifecycle of those attacks.</p> 
<figure class="wp-block-image size-large">
 <img decoding="async" width="1024" height="633" src="https://image.coinpedia.org/wp-content/uploads/2024/05/18173539/Crypto-Hack-1024x633.png" alt="Crypto Hack Report" class="wp-image-304672" title="Chart" srcset="https://image.coinpedia.org/wp-content/uploads/2024/05/18173539/Crypto-Hack-1024x633.png 1024w, https://image.coinpedia.org/wp-content/uploads/2024/05/18173539/Crypto-Hack-300x186.png 300w, https://image.coinpedia.org/wp-content/uploads/2024/05/18173539/Crypto-Hack-768x475.png 768w, https://image.coinpedia.org/wp-content/uploads/2024/05/18173539/Crypto-Hack-150x93.png 150w, https://image.coinpedia.org/wp-content/uploads/2024/05/18173539/Crypto-Hack.png 1200w" sizes="(max-width: 1024px) 100vw, 1024px">
</figure> 
<h2 class="wp-block-heading" id="h-1-sonne-finance-s-million-flashlash-loan-attack"><strong>1. Sonne Finance’s million Flashlash loan attack</strong></h2> 
<p>Sonne Finance, a typical lending/borrowing platform, was built on Compound and deployed on Optimism, a Layer-2 chain. However, there came a <a href="https://coinpedia.org/news/defi-project-sonne-finance-exploited-for-20-million-on-optimism">flash loan attack </a>which affected their protocol.&nbsp;</p> 
<p>Attackers took advantage of the bugs in the protocol and bypassed the flash loan function to drain more than $20 million in several seconds. Through these loans, the hackers managed to manipulate the liquidity pools of the protocol and hence created massive financial harm which could only be stopped after it was detected.</p> 
<p>Sonne Finance in cooperation with its White Hat hacker community and Blockchain security experts is on the way to tracing the stolen funds and solving the mistakes that were exploited.</p> 
<h2 class="wp-block-heading" id="h-2-blocktower-capital-partial-funding-drain"><strong>2. BlockTower Capital: Partial Funding Drain</strong></h2> 
<p>Blocktower Capital, one of the big players in crypto financial investment managing worth about $1.7&nbsp; billion in assets were victim to a <a href="https://uk.style.yahoo.com/style/blocktower-capital-loses-1-5m-172926051.html" target="_blank" rel="noreferrer noopener">massive breach </a>in their security system.&nbsp;</p> 
<p>A major setback was the loss and half drain of its main hedge fund through the action of fraudsters. The exact quantity of funds of the scam is concealed, nevertheless, the fraud surely has forced the firm to look towards engaging Blockchain forensic analysts for further investigation.&nbsp;&nbsp;</p> 
<h2 class="wp-block-heading" id="h-3-alex-lab-4-3-million-loss-to-weaknesses-in-private-key-storage"><strong>3. ALEX Lab: $4.3 million loss to weaknesses in private key storage</strong></h2> 
<p>ALEX lab, a DeFi bitcoin application, <a href="https://twitter.com/ALEXLabBTC/status/1791020176332230988" target="_blank" rel="noreferrer noopener">lost $4.3 Million </a>of tokens. The assault specifically attacked the bridge service of BTC and consumed $300,000 k worth of Bitcoin,&nbsp; $3.3 million in stablecoins and $75,000 in Sugar Kingdom (SKO) tokens.</p> 
<p>After the detected breach, ALEX Lab is cooperating with experts to make it through its implementations and changes to its key management systems.&nbsp;&nbsp;</p> 
<h2 class="wp-block-heading" id="h-4-predy-finance-464-000-contract-vulnerability-exploit"><strong>4. Predy Finance: $464,000 contract vulnerability exploit</strong></h2> 
<p>Predy Finance, the DEX on the Aribtrum chain, has been <a href="https://twitter.com/SlowMist_Team/status/1790326798469001379" target="_blank" rel="noreferrer noopener">attacked</a> due to its contract flaw – resulting in the breach of $464,000&nbsp; from their lending pool.&nbsp;</p> 
<p>The hackers discovered a vulnerability in the Predy Finance smart contracts allowing them to steal considerable values leaving the system and the authorities to that problem. They knew what to do only when the issue was detected and by that time the assets had been drained already.</p> 
<p>Predy Finance had stopped operations to identify and resolve the contract issues and the losses caused by those security flaws. To identify and fix the flaws of the smart contract they coordinated with blockchain security auditors and their collaboration for successful smart contracting.&nbsp;&nbsp;</p> 
<h2 class="wp-block-heading" id="h-5-pump-fun-2-million-misappropriation-from-a-previous-employee"><strong>5. Pump. fun: $2 million misappropriation from a previous employee</strong></h2> 
<p>There was a massive SOL token compromise in Pump.fun when a former platform employee stole more than<a href="https://coinpedia.org/news/pump-fun-crypto-platform-resumes-operations-after-employee-misappropriation-incident" target="_blank" rel="noreferrer noopener"> $2 million</a> worth of digital assets. The employee had benefited from the prominent role that granted them unrestricted access to the vault’s custody.&nbsp;</p> 
<p>This exploit utilised flash loans on Solana lending protocol to take the borrowing of SOL, trade them for different coins to cause their values on bonding curves to go up to 100%, and then sell the coins to get the liquidity that they use to repay the flash loans.</p> 
<p>Pump. cheap resumed by its zero-fee trading for the immediate next seven days to repair the trust of the users. The site has underscored its commitment to loading seeding liquidity pools on Raydium for the impacted coins and providing consumers with assets back.&nbsp;</p> 
<p>Indeed, the events that unfolded during the past seven days have once more brought the multi-faced and dynamic nature of cyber risks leading to the crypto sphere to the forefront.&nbsp;</p> 
<p>The spectrum of illustrious flash loan exploits to the intruder threat and contract vulnerabilities revealed the significance of constant improvement in security practices, active monitoring and critical auditing actions for the ultimate object of asset protection.</p> 
<p>Also Check Out: <a href="https://coinpedia.org/research-report/q1-2024-crypto-hack-overview-trends-losses-and-recovery-efforts/">Crypto Hack Report Q1 2024: Trends, Losses, and Recovery Efforts </a></p>

Crypto Hack Report This Week: Analyzing Recent DeFi Hacks and Security Breaches

Table of Contents

CoinPedia News

Other articles published on May 18, 2024

XRPL Startup XPMarket Initiates Token Swap After Distribution Error

Why Ethena (ENA) Is Up By 10% Today

Turn $1 Into $100 This Week With 3 Altcoins To Buy

Two Now Arrested in a $73m Pig Butchering Scam

First Multi-Chain Meme Coin Presale Exceeds $15 Million in Funding – Best Crypto to Buy Now

Blockchain’s Disruptive Impact on Gaming

Join our free newsletter for daily crypto updates!