#hacker

PlayDapp, the cryptocurrency gaming platform, is reeling from a massive $290 million token loss following two hacking incidents in just one week. The initial breach was on February 9, where a hacker managed to mint 200 million PLA tokens, valued at $36.5 million, presumably by cracking into the developers' private key.

Concentric, a liquidity management protocol on the Arbitrum network, has suffered an exploit. A social engineering attack on a team member enabled a hacker to access the wallet utilized for smart contract deployments.

A brief interview with the KyberSwap hacker has surfaced on the Internet. Interviewer: Could you please explain why you did what you did? Hacker: Is not obvious? I want to buy a crypto company at a cheap price.

Following the shutdown of the LockBit hacker group’s website and other actions by law enforcement, including sanctions against numerous fraudulent crypto wallets, analysts have published several key points that might have gone unnoticed:

After breaching the X-account of Algorand's CEO, the hacker began a spree of satirical posts, sharing a variety of music, and amusingly altering the account's bio. One notable post included a fictional tale about Justin Sun, ambitiously seeking to promote Algorand for unrestricted access to the token minting to back TUSD.

He lists his demands: “All documents and information related to company / protocol formation, structure, operation, revenues, profits, expenses, assets, liabilities, investors, salaries, etc.” “Temporary full authority and ownership over the governance mechanism (KyberDAO).” “Surrender of all Kyber (the company) assets. This is both On-chain and Off-chain assets.”

This week attack targeted KyberSwap’s Elastic pools, impacting funds across various blockchains, including Arbitrum, Ethereum, Polygon, Optimism, and Base.

Buterin explained that he has successfully recovered control of his T-Mobile account, which the hacker had compromised through this method. The co-founder of Ethereum also shared some valuable lessons gained from his experience: “I had seen the “phone numbers are insecure, don’t authenticate with them” advice before, but did not realize this”. Removing phone numbers from X accounts and having 2FA enabled is a way to protect yourself from SIM-swap attack.

The FBI has sounded the alarm bells: Lazarus Group and APT38, North Korean hacker collectives, could potentially sell off stolen cryptocurrency amassing $40 million, potentially affecting Bitcoin's valuation. Through their investigative work, the agency has identified nearly 1580 BTC across six distinct Bitcoin addresses. The stolen assets are reportedly from Alphapo, CoinsPaid, and Atomic Wallet. In aiding market monitoring, the FBI has disclosed the associated wallet addresses, urging vigilance on any transactions involving them.