Ethereum

Core

April

<p>The DEX Merlin, which operates on zkSync, a <a href="https://www.cryptopolitan.com/binance-has-integrated-optimism/?swcfpc=1">Layer 2 scaling </a>solution for Ethereum, suffered a significant setback when a hacker successfully breached its security measures. As a result, the hacker was able to steal more than $1.82 million in funds and subsequently drained the LP (liquidity pool).</p>



<p>According to various blockchain security experts, the exchange has fallen victim to a coordinated attack by hackers who managed to steal significant digital assets. Reports suggest that the perpetrators could extract a total of $1,823,477 from Merlin&#8217;s Core Farming Pools, which were held in USD Coins (USDC), TAROT, and Ethereum (ETH) coins.</p>



<p>This breach of DEX Merlin occurred shortly after its release. Even though DEX Merlin had an audit done by blockchain security firm CertiK to reassure potential investors, hackers managed to access the network a few days later.</p>



<p>According to the reports, the cyber cartel linked all the stolen assets to the Ethereum blockchain network.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#PeckShieldAlert</a> Our community contributor has reported that Merlin <a href="https://twitter.com/hashtag/DEX?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#DEX</a> on <a href="https://twitter.com/hashtag/zksync?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#zksync</a> was exploited. One of the exploiters 0x2744&#8230;9b7 has grabbed ~850K <a href="https://twitter.com/search?q=%24USDC&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$USDC</a> and bridged them to <a href="https://twitter.com/hashtag/Ethereum?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#Ethereum</a> <a href="https://t.co/hfgjJJY7Ml" rel="nofollow" target="_blank">https://t.co/hfgjJJY7Ml</a> <a href="https://t.co/07uSGMAt7e" rel="nofollow" target="_blank">pic.twitter.com/07uSGMAt7e</a></p>&mdash; PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1651076481240690689?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">April 26, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>Merlin recently announced they would hold a three-day public sale of their coveted mage tokens. Even more enticing is that there&#8217;s no hard cap in place, allowing investors to purchase as many tokens as they desire.</p>



<p>According to the developers, $MAGE will start its initial trading at $45, with an impressive market value of $850K. As for the final price of tokens, that will be determined by the total amount raised during the sale, leaving eager buyers on the edge of their seats.</p>



<p>CertiK, a security company that tracks blockchain data, has announced that it has identified the primary cause of the recent hack on DEX Merlin. According to their initial findings, the incident&#8217;s root cause is likely a private key management issue rather than an exploit.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">We’re actively investigating the <a href="https://twitter.com/TheMerlinDEX?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">@TheMerlinDEX</a> incident. Initial findings point to a potential private key management issue rather than an exploit as the root-cause.<br><br>While audits cannot prevent private key issues, we always highlight best practices to projects.<br><br>Should any foul…</p>&mdash; CertiK (@CertiK) <a href="https://twitter.com/CertiK/status/1651088669187473408?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">April 26, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>Although audits cannot prevent vital private issues, the company is always proactive in highlighting project best practices. CertiK will collaborate with the appropriate authorities and share all relevant information if any foul play is discovered. Stay tuned for updates on this matter.</p>

DEX Merlin hacked just days after security audit from CertiK

Cryptopolitan_News

在 2023年4月26日發表的其他文章

Algorithmic Stablecoins: Will They Ever Find Enough Support?

Bitcoin makes play for $30k, leading to $145M in liquidations

Aptos price analysis: APT consolidates around $10 under bearish pressure

zkSync DEX Merlin Exploited for Over $1.8M

Chainlink price analysis: Price curve rebounds to $7.47 following a bullish shift

CertiK-audited DEX Merlin Exploited For $1.8m

訂閱免費電子報，每天收取加密貨幣最新動態！