Maker

Bitcoin

Million

ZachXBT

On Tuesday, a cryptocurrency whale suffered a loss, with approximately $55.4 million worth of Dai stablecoin stolen in a phishing attack.
According to the blockchain security firm CertiK, the attacker likely used a phishing tool known as Inferno Drainer to gain access to the whale’s externally owned account (EOA).
<h2 id="inferno-drainer-phishing-attack">Inferno Drainer Phishing Attack</h2>
The incident was first <a href="https://t.me/investigations/150" data-wpel-link="external" target="_blank" rel="noopener noreferrer nofollow">reported</a> by on-chain sleuth ZachXBT in a Telegram post, where he highlighted the breach before CertiK <a href="https://x.com/CertiKAlert/status/1826116902432944390" data-wpel-link="external" target="_blank" rel="noopener noreferrer nofollow">confirmed</a> the news.
Inferno Drainers are notorious for deceiving victims by mimicking legitimate websites or emails from well-known cryptocurrency exchanges or decentralized finance (DeFi) protocols, ultimately compromising their private information.
The attack targeted a Maker Vault, a collateralized debt position that allows users to borrow the U.S. dollar-pegged Dai stablecoin by depositing collateral. CertiK <a href="https://x.com/CertiKAlert/status/1826129237343945074" data-wpel-link="external" target="_blank" rel="noopener noreferrer nofollow">explained</a> that the bad actor exploited a vulnerability to gain control of the whale’s Maker Vault through the compromised EOA.
The hacker then transferred ownership of the victim’s DSProxy #166,776, a smart contract that enables users to execute multiple contract calls in a single transaction, to a new address under their control.
The attacker changed the protocol’s owner address to their wallet after gaining control and minted almost 56 million in DAI, effectively draining the vault of its funds.
<h2 id="july-sees-over-270m-in-losses">July Sees Over $270M in Losses</h2>
This incident is the latest in a series of high-profile hacks targeting the crypto space. Earlier this week, ZachXBT <a href="https://x.com/zachxbt/status/1825499490956231021" data-wpel-link="external" target="_blank" rel="noopener noreferrer nofollow">reported</a> a separate breach involving the theft of 4,064 Bitcoin (BTC), worth approximately $238 million.
The stolen BTC stash was quickly transferred across multiple platforms, including THORChain, KuCoin, ChangeNow, Railgun, and Avalanche Bridge.
Although the exact method used in the heist remains unclear, experts believe a combination of phishing, social engineering, and exploiting wallet vulnerabilities may have been involved.
According to CertiK, more than $270 million was <a href="https://x.com/CertiKAlert/status/1818603157649281382" data-wpel-link="external" target="_blank" rel="noopener noreferrer nofollow">lost</a> in various hacks, exploits, and scams across Web3 projects in July alone. This figure marks the second-highest monthly loss recorded in 2024, with attackers returning only $7.8 million of the stolen funds.
The report highlighted the various methods used by the bad actors, including exit scams, which accounted for approximately $3 million in losses, flash loans with an estimated $265.8 million lost, and other exploits totaling around $9.8 million.
DeFi protocols have become a prime target for cybercriminals, as DEX aggregation and bridging protocol LI.FI <a href="https://cryptopotato.com/li-fi-defi-platform-exploited-over-8-million-lost-to-attack/" data-wpel-link="internal" rel="noopener noreferrer nofollow">suffered </a>a $10 million loss due to a security breach last month.
Additionally, the WazirX hack, which <a href="https://cryptopotato.com/unpacking-the-wazirx-hack-what-happened-and-how-much-crypto-is-lost/" data-wpel-link="internal" rel="noopener noreferrer nofollow">saw</a> over $230 million funneled through the controversial mixing service Tornado Cash, left several retail investors with losses.
The post <a href="https://cryptopotato.com/55-million-in-dai-stolen-from-this-crypto-whale-via-phishing-attack/" rel="noopener noreferrer nofollow">$55 Million in DAI Stolen From This Crypto Whale via Phishing Attack</a> appeared first on <a href="https://cryptopotato.com/" rel="noopener noreferrer nofollow">CryptoPotato</a>.

$55 Million in DAI Stolen From This Crypto Whale via Phishing Attack

Table of Contents

CryptoPotato_News

Other articles published on Aug 22, 2024

India to Take First Vital Step Towards Crypto Regulation

China Recognizes "Virtual Asset" Transactions in New AML Law Interpretation Amid Crypto Unban Rumors

Ethereum Price Stuck in a Critical Situation: A Small Drop May Lead to a 40% Pullback Soon

PayPal joins forces with Anchorage Digital for PYUSD rewards

Crypto exchange WazirX suspends all open orders, sparking community concerns

El Salvador Will Train 80,000 Public Servants In Bitcoin

Join our free newsletter for daily crypto updates!