Arbitrum

Prime

Delta

ZachXBT

Avalanche

DeltaPrime, a decentralized finance (DeFi) protocol, lost around&nbsp;<a style="text-decoration:none" href="https://x.com/CyversAlerts/status/1835583776325337202">$5.9 million</a> worth of various tokens due to an apparent private key leak, according to Cyvers Alerts.&nbsp;
<div>
 <blockquote class="twitter-tweet">
 🚨ALERT🚨<a href="https://twitter.com/DeltaPrimeDefi?ref_src=twsrc%5Etfw">@DeltaPrimeDefi</a> has faced a security incident on their admin keys. Attacker had control on the private key of 0x40e4ff9e018462ce71fa34abdfa27b8c5e2b1afb then he upgraded the proxy! So far $5.93M has been drained! Want to keep your company off our alerts radar? Learn… <a href="https://t.co/yOmNZJyp5l">https://t.co/yOmNZJyp5l</a> <a href="https://t.co/lztFvXVmfI">pic.twitter.com/lztFvXVmfI</a>— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1835583776325337202?ref_src=twsrc%5Etfw">September 16, 2024</a>
 </blockquote> 
</div>
The exploit has primarily affected DeltaPrime's operations on the Arbitrum blockchain, with losses expected to rise.
<h2 dir="ltr" id="span-span-exploit-details-span-span">Exploit Details</h2>
The breach occurred when a hacker gained control of the admin private key for DeltaPrime's proxies. This key, associated with the address 0xx40e4ff9e018462ce71fa34abdfa27b8c5e2b1afb, allowed the attacker to redirect funds to a malicious contract identified as 0xD4CA224a176A59ed1a346FA86C3e921e01659E73.&nbsp;
&nbsp;
Per reports, the hacker’s actions included draining pools like DPUSDC, DPARB, and DPBTCb. Cyvers reported that the stolen funds were converted from USDC to Ethereum (ETH).
&nbsp;
As of the latest reports, the estimated loss is approximately $5.93 million; however, this figure may increase as the suspicious address continues to drain funds.&nbsp;
<blockquote>
 “Hacker took control of the wallet which is the admin of Delta Prime proxy contacts, later on, upgraded these contracts to point to his malicious contract this enabled the hacker to drain Delta Prime pools on Arbitrum chain. Total loss is&nbsp; 5.9 million USD,” Meir Dolev, CTO, CyVers, told BSCN.
</blockquote>
The DeltaPrime team has yet to comment publicly on the incident, and it remains unclear whether the protocol’s deployment on the Avalanche network is also vulnerable.
<h2 dir="ltr" id="span-span-background-on-deltaprime-span-span">Background on DeltaPrime</h2>
DeltaPrime launched on the Avalanche network in January 2023 and quickly became notable for its substantial total value locked (TVL), which exceeded&nbsp;<a style="text-decoration:none" href="https://defillama.com/protocol/deltaprime#information">$64 million</a> before the exploit. The protocol also unlocked more than $20 million in liquidity.&nbsp;
&nbsp;
It received significant backing from investors such as Avalanche, GSR Capital, Moonhill Capital, and Uplift.
&nbsp;
The recent breach has led to a&nbsp;<a style="text-decoration:none" href="https://www.coingecko.com/en/coins/prime-2">6% drop</a> in DeltaPrime’s native token, PRIME, which is now trading at $1. Blockchain investigator ZachXBT noted that DeltaPrime had previously employed IT workers from North Korea, according to Crypto(.)news. While these personnel have been removed, the connection between the hack and North Korea remains uncertain.
&nbsp;
The incident is part of a worrying trend in the cryptocurrency world. Data from TRM Labs indicates that stolen crypto surged to&nbsp;<a style="text-decoration:none" href="https://www.cnbc.com/2024/07/09/hackers-stole-twice-as-much-crypto-in-the-first-half-of-2024.html#:~:text=Tech-,Stolen%20crypto%20doubled%20to%20%241.38%20billion%20in%20the,of%202024%2C%20research%20firm%20says&amp;text=TRM%20Labs%20data%20showed%20hackers,same%20period%20a%20year%20ago.">$1.38 billion</a> in the first half of 2024, more than double the amount stolen during the same period in 2023.&nbsp;

DeltaPrime DeFi Protocol Lost $5.9M in Ongoing Exploit: Report

Table of Contents

BSCN

Other articles published on Sep 19, 2024

FactSet Beats Expectations with $3.74 EPS in Q4 FY’24

WazirX Hacker Launders 200 Crore in Two days

What is the Bitcoin CME gap?

Say Goodbye to Delayed Transfers: USDC Now Directly Accessible in Brazil and Mexico!

Circle and Sony Block Solutions Labs Partner to Boost USDC Adoption on Soneium

Cypher Capital Joins a $15M Seed Round for Hemi Labs to Enhance Blockchain Interoperability

Join our free newsletter for daily crypto updates!