Penpie

Pendle

DeFi

Tornado Cash

Tornado

The hacker behind the Penpie protocol breach has reportedly withdrawn approximately $7 million of the stolen funds through the crypto mixer Tornado Cash just 12 hours after stealing $27 million.
<blockquote class="twitter-tweet">
 <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">ALERT<img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"><a href="https://twitter.com/Penpiexyz_io?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@Penpiexyz_io</a> exploiter has deposited around $7M to <a href="https://twitter.com/TornadoCash?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@TornadoCash</a> at <a href="https://t.co/f17YcJ6blH" rel="noopener noreferrer nofollow">https://t.co/f17YcJ6blH</a>
 Want to keep your company off our alerts radar? Learn how to secure your assets: Book a Demo <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f680.png" alt="🚀" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://t.co/uUbFkFTp4h" rel="noopener noreferrer nofollow">https://t.co/uUbFkFTp4h</a><a href="https://twitter.com/hashtag/CyversAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#CyversAlert</a> <a href="https://t.co/zFX85sK9A9" rel="noopener noreferrer nofollow">https://t.co/zFX85sK9A9</a> <a href="https://t.co/J20g3HS2T0" rel="noopener noreferrer nofollow">pic.twitter.com/J20g3HS2T0</a>
 — <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Cyvers Alerts <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1831221291027755113?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 4, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
On September 4, cybersecurity firm Cyvers<a style="color: #0000ff;" href="https://x.com/CyversAlerts/status/1831221291027755113" rel="noopener noreferrer nofollow"> reported</a> that the hacker had transferred 26% of the stolen funds to a wallet address linked to Tornado Cash. Blockchain security firm PeckShield has also<a href="https://x.com/PeckShieldAlert/status/1831253958314332335" rel="noopener noreferrer nofollow"> confirmed</a> this and stated that the hacker’s address continues to launder the remaining funds through multiple transactions directed to the crypto mixer.
Notably, Cyver alerts had earlier raised alarms about suspicious activity on the protocol’s smart contracts. The activity was linked to a waller address to Tornado Cash.&nbsp;
<blockquote class="twitter-tweet">
 <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">ALERT<img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"><a href="https://twitter.com/Penpiexyz_io?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@Penpiexyz_io</a> exploiter has deposited around $7M to <a href="https://twitter.com/TornadoCash?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@TornadoCash</a> at <a href="https://t.co/f17YcJ6blH" rel="noopener noreferrer nofollow">https://t.co/f17YcJ6blH</a>
 Want to keep your company off our alerts radar? Learn how to secure your assets: Book a Demo <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f680.png" alt="🚀" class="wp-smiley" style="height: 1em; max-height: 1em;"> <a href="https://t.co/uUbFkFTp4h" rel="noopener noreferrer nofollow">https://t.co/uUbFkFTp4h</a><a href="https://twitter.com/hashtag/CyversAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">#CyversAlert</a> <a href="https://t.co/zFX85sK9A9" rel="noopener noreferrer nofollow">https://t.co/zFX85sK9A9</a> <a href="https://t.co/J20g3HS2T0" rel="noopener noreferrer nofollow">pic.twitter.com/J20g3HS2T0</a>
 — <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> Cyvers Alerts <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1831221291027755113?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">September 4, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
Meanwhile, the development team of Pendle, the platform on which the Penpie protocol is built, has<a href="https://x.com/pendle_fi/status/1831168623634993402" rel="noopener noreferrer nofollow"> released a post-mortem report</a> on the hack. The team stated that the attacker exploited a vulnerability related to Penpie’s feature, which allows permissionless listing of Pendle markets, to steal the funds. They reported that their in-house monitoring system detected suspicious activity, prompting them to immediately suspend all deposits and withdrawals and pause the platform’s smart contracts. According to the report, this action helped prevent approximately $105 million of assets from being stolen from the protocol.
Pendle’s developers confirmed that the vulnerability was specific to Penpie and that Pendle’s contracts were secure. They noted that after rigorous checks and coordination with relevant parties, they have safely unpaused the platform’s smart contracts and resumed normal operations as of 05:00 UTC, September 4, 2024, about 12 hours after the incident.
According to the Pendle team, this immediate response prevented an additional loss of $105 million worth of assets from the DeFi protocol. The team noted that it had enlisted the help of security experts, Seal 911, to prevent further attacks.
RELATED: <a style="color: #0000ff;" href="https://defi-planet.com/2024/07/wazirx-suspends-withdrawals-following-230-million-multisig-wallet-breach/" rel="noopener noreferrer nofollow">WazirX Suspends Withdrawals Following $230 Million Multisig Wallet Breach</a>
This incident adds to a rapidly growing list of hacks and exploits DeFi protocols have suffered since the start of the year. An August 2024 <a style="color: #0000ff;" href="https://assets.ctfassets.net/t3wqy70tc3bv/fYG4wHZa0LfrEFcjqpqm1/c56684e1d8fc95247fd5df6560fe3486/Immunefi_Crypto_Losses_In_August_2024.pdf" rel="noopener noreferrer nofollow">report </a>from ImmuniFi revealed that over $1.2 billion in funds had been stolen through hacks and exploits in 2024, marking a 15.5% increase compared to the same period in 2023, when losses totalled just over $1 billion.
&nbsp;
If you want to read more news articles like this, visit <a style="color: #0000ff;" href="https://defi-planet.com/" rel="noopener noreferrer nofollow">DeFi Planet</a> and follow us on <a style="color: #0000ff;" href="https://twitter.com/PlanetDefi" rel="noopener noreferrer nofollow">Twitter</a>, <a href="https://www.linkedin.com/company/defi-planet/" rel="noopener noreferrer nofollow">LinkedIn</a>, <a href="https://www.facebook.com/DeFi-Planet-129907662611402" rel="noopener noreferrer nofollow">Facebook</a>, <a href="https://www.instagram.com/defi.planet/" rel="noopener noreferrer nofollow">Instagram</a>, and <a style="color: #0000ff;" href="https://coinmarketcap.com/community/profile/DeFiPlanet/" rel="noopener noreferrer nofollow">CoinMarketCap Community</a>.
“Take control of your crypto portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.”
The post <a href="https://defi-planet.com/2024/09/penpie-protocol-hacker-reportedly-laundered-7m-through-tornado-cash-within-12-hours-of-27m-theft/" rel="noopener noreferrer nofollow">Penpie Protocol Hacker Reportedly Laundered $7M Through Tornado Cash Within 12 Hours of $27M Theft</a> appeared first on <a href="https://defi-planet.com" rel="noopener noreferrer nofollow">DeFi Planet</a>.

Penpie Protocol Hacker Reportedly Laundered $7M Through Tornado Cash Within 12 Hours of $27M Theft

DeFi Planet

Other articles published on Sep 4, 2024

1inch Team's Significant Token Buy Pushes $1INCH Price Up 20%

Egrag Updates XRP Forecast: Market Peaks Anticipated in May and September 2025

Ripple CEO Brad Garlinghouse Says RLUSD Stablecoin Is Only Weeks From Launch

Key Reason Why BTC, SHIB, XRP, ADA Are Down: Details

Sony Unveils Ethereum Layer-2 Blockchain 'Soneium' to Accelerate Web3 Adoption

Tom Lee Advises Investors to Stay Cautious but Ready to ‘Buy the Dip’ Ahead of U.S. Election

Join our free newsletter for daily crypto updates!