Ward Analytics

Munch… 🍪 In an almost cinematic twist, a hacker turned @Munchables, a @Blast L2 project, into their personal ATM, swiping a chill ~$62.5M 💸 The heist was short-lived, though, as the funds were snatched back hours later. This sequel to the Super Sushi Samurai's $4.8M snafu marks another #oopsie in Blast's infancy, a blockchain that hoarded ~$1.24B in TVL since inception. But how did it happen? > A rogue developer exploited the #Munchables project, by manipulating an upgradeable proxy contract to assign themselves 1,000,000 #ETH. The scheme allegedly involved altering contract storage and hiring developers under false identities to obscure their tracks. > After being exposed by ZachXBT, the developer returned the funds, totaling about $60.5M, without conditions. This recovery was secured in a multisig wallet by Blast core contributors, with notable assistance from @ZachXBT and @samczsun. > Speculation tied the attacker to the North Korean Lazarus group, though unconfirmed. Discussions on rolling back the Blast chain to reverse the theft raised decentralization concerns but were ultimately unnecessary as the funds were recovered. > An audit completed in March 2024 by @Entersof did not prevent the exploit.

No spring break for Curio… 😞 Curio got hit with a $16 million 💸 sneeze thanks to a leaky smart contract on #Ethereum 4 days ago. They rushed to say "it's just an Ethereum problem, folks," leaving Polkadot and Curio Chain out of the drama. The hacker didn't just play with governance toys; they went full Ocean's Eleven with token swaps and cross-chain shenanigans. They're still sitting on a mountain of 996 billion CGT (!), making it a pain to figure out how deep the hole goes. But how did it happen? > The CurioDAO Association revealed on March 23, 2024, that their voting protocol was compromised. > Hacken, Blockchain Security Auditor detailed the breach, highlighting a critical misuse of the "cook" function within an attack contract that manipulated governance and triggered mass token minting through the "IDSChief" and "IDSPause" contracts. > The attacker acquired a minimal amount of CGT tokens to gain elevated voting power and executed a delegate call to a malicious contract by locking these tokens and voting. >This exploit wasn't just about creating new tokens and altering governance though; it involved intricate financial maneuvers, including token swaps and cross-chain transfers, aiming to disperse and conceal the origin of the fraudulently minted tokens. > CurioDAO was quick on its feet, and released an exploit recovery strategy on March 25. Follow me for updates! (investigation in comments)

We are proud to announce that we will be joining forces with Walletlabels as a data partner 🤝 Another step towards our mission of making the #Ethereum ecosystem more transparent and safe 💪

We’re excited to announce the launch of Talent Protocol V2 💫 A new type of resume, for the onchain era of the internet. ✨ Talent Protocol V2 includes: - Launch of the Talent Passport - Airdrop Campaign with CoinList, as part of our $TAL road to TGE! - New Website - Sharing our Whitepaper - New Branding - And so much more! 📖 Read everything about it in our latest Blog post: Special shoutout to our partners that help us in this journey 🙏🏻 Coinbase, Protocol Labs, Celo Foundation, Airstack, Worldcoin, ETHGlobal, ENS, Alliance DAO, Privy, Lens Protocol, Base, Eden, impactMarket, Ward Analytics, Polkamarkets Labs, TAIKAI | Hackathon Platform https://lnkd.in/dthVK9ve

The day OKX was not OK… 🥲 Many months have passed since OKX's decentralized exchange aggregator faced a $2.7 million 💸 setback due to a compromised proxy contract, an old-school private key breach 🔑 > The intrusion exploited an upgraded proxy contract, leading to unauthorized fund transfers from unsuspecting users 😬 > Despite claims of "best-in-class security," 🛡 the breach highlighted vulnerabilities in OKX's system, particularly in its #DEX aggregator aimed at facilitating on-chain trades for users seeking niche opportunities 🔎 > The aftermath saw a scramble to address the loss, initially pegged at $430k by SlowMist, but later adjusted to $2.7M by further investigations from PeckShield and Hacken, Blockchain Security Auditor. The larger sum included 800 #ETH and $620k 💰 in #stablecoin distributed across several addresses. > Bridging the gap between traditional and decentralized finance is important. We are simply not sure this is the right way to do it 🙃

Glad you found WardGraph useful Rodrigo Moreira! Great to have you as part of our community 💪

Attention all Hong Kong #VASP 😱 Today's the deadline to apply for the license with the #HK Securities and Futures Comission!

Why the Lockbit Ransomware bust 👮♂️ should serve as a warning to centralized exchanges... Last tuesday, the National Crime Agency (NCA) alongside the U.S. Department of Justice, announced the disruption of Lockbit, a proeminent “Ransomware as a Service” virus responsible for causing losses that total $120 million 💰 across 2000 different victims. 10 addresses were added to the @OFAC special designated nationals and blocked persons list: Ivan Kondratyrev: > 1A7SKE2dQtezLktCY8peLsdAtkqxV9r1dC (Bitcoin) > Bc1q8ew45w2agdffrnwp6adt2gqrc9n4mkev9ns29c (Bitcoin) > bc1qagp0gy58v8hqvw4p2wsphcxg067rrppp45hexr (Bitcoin) > bc1qn6segn8km4nfdp9vueu6msfjsaxaqgun9h60n9 (Bitcoin) > bc1qx9upga7f09tsetqf78wa3qrmcjar58mkwz6ng6 (Bitcoin) > 0xf3701f445b6bdafedbca97d1e477357839e4120d (Ethereum) > 15cRqR3TXS1JehBGWERuxFE8NhWZzfoeeU (Bitcoin) > bc1q5jqgm7nvrhaw2rh2vk0dk8e4gg5g373g0vz07r (Bitcoin) > 32pTjxTNi7snk8sodrgfmdKao3DEn1nVJM (Bitcoin) Artur Sungatov: > 18gaXypKj9M23S2zT9qZfL9iPbLFM372Q5 (Bitcoin) Today we will be taking a look at the Ethereum address of one of the sanctioned entities: Ivan Kondratyrev. Ward Analytics was able to establish a direct connection between this sanctioned actor and at least 6 different exchanges (the sanctioned address itself is a CoinsPaid deposit address: According to @vxunderground news on Twitter, it seems that the final mastermind has not been caught, and LockBit has even publicly offered a larger reward for the public to find him. If you want to monitor this story, be sure to follow Ward Analytics as we post weekly about all things crypto security. #blockchain #crypto #cryptocurrency #bitcoin #btc #ethereum

See you in Switzerland! START Lisboa 😉