Arbitrum

USDC

Security

Discord

WazirX

DeltaPrime, an on-chain brokerage platform, has fallen victim to a significant security <a href="https://x.com/shoucccc/status/1835554652777336975">breach</a> early Monday, resulting in the loss of over $6 million in various tokens. According to security researchers on X, the exploit was caused by a private key leak that allowed the attacker to gain control over the platform’s administrative functions. 
<h2 id="span-style-font-weight-400-attack-details-span">Attack Details</h2> 
The <a href="https://x.com/cyversalerts/status/1835568466901766208">exploit</a> specifically impacted DeltaPrime’s deployment on the Arbitrum blockchain. DeltaPrime, which operates on both Arbitrum and Avalanche blockchains, confirmed that only the Arbitrum version was compromised. Users on Arbitrum are unable to withdraw funds due to the platform’s borrowing and lending mechanisms, which rely on proxies to interact with contracts and users. 
Chaofan Shou, founder of security firm Fuzzland, explained that the hacker managed to gain control over the admin account of the proxies, specifically wallet 0xx40e4ff9e018462ce71fa34abdfa27b8c5e2b1afb. The hacker then upgraded these proxies, redirecting them to a malicious contract, 0xD4CA224a176A59ed1a346FA86C3e921e01659E73, effectively gaining control of the protocol’s key functionalities. 
Proxies, which serve as intermediaries in blockchain applications, are crucial to the security and operation of decentralized finance (DeFi) platforms, making this breach particularly damaging. 
<h2 id="span-style-font-weight-400-deltaprime-responds-span">DeltaPrime Responds</h2> 
DeltaPrime’s team, while investigating the issue, has yet to formally confirm the exploit on their Discord channel, but did acknowledge that they were working on resolving the situation. Meanwhile, DeltaPrime’s native PRIME token <a href="https://www.coingecko.com/en/coins/prime-2">dropped</a> 5% in the past 24 hours. 
Security firm Cyvers confirmed the exploit, noting it had detected multiple suspicious transactions involving DeltaPrime’s on-chain pools. The compromised pools included those holding USDC stablecoins, Arbitrum’s native token ARB, and bitcoin (BTC). Cyvers stated that the breach occurred after the platform’s admin lost access to its private key, granting the attacker full control over key aspects of the protocol. 
<h2 id="span-style-font-weight-400-rising-security-exploits-span">Rising Security Exploits</h2> 
The DeltaPrime breach adds to the growing list of recent crypto attacks. Just last week, renowned <a href="https://thecoinrise.com/indonesian-exchange-indodax-hit-by-15-7m-exploit-user-funds-safe/">Indonesian cryptocurrency exchange Indodax suffered a security breach</a> that resulted in the loss of $15.7 million. 
Moreover, in July, India’s leading crypto exchange <a href="https://thecoinrise.com/wazirx-hit-by-234-9-million-hack-suspends-withdrawals/">WazirX also reported a major security exploit</a>, losing around $235 million worth of funds. 
The post <a href="https://thecoinrise.com/deltaprime-suffers-6m-exploit-following-private-key-leak-on-arbitrum/">DeltaPrime Suffers $6M Exploit Following Private Key Leak on Arbitrum</a> appeared first on <a href="https://thecoinrise.com/">TheCoinrise.com</a>.

DeltaPrime Suffers $6M Exploit Following Private Key Leak on Arbitrum

Table of Contents

TheCoinrise Media

Other articles published on Sep 16, 2024

BaseBros DeFi project enacts rug pull, steals over $130k

How Larry Fink turned BlackRock bullish on Bitcoin, despite its largest holder’s resistance

CFTC Warns of Potential Manipulation in Prediction Markets Amid Kalshi Case

Crypto Ownership in the U.S. Is 2.75x Higher Than NFL Game Attendance

Bitcoin Price Slumps Following Trump’s 2nd Assassination Attempt

Friend.Tech Fades Away: From Crypto Darling to Abandoned Experiment

Join our free newsletter for daily crypto updates!