クリプトドットイン

暗号に強い人材のためのオルタナティブ・リンクトイン

DeFi Platform Delta Primes Loses $6 Million In Security Breach, Is North Korea Involved?

-

によって

Decentralized Finance (DeFi) platform Delta Primes suffered a security breach on Monday, affecting the protocol’s users. The attack took $6 million from the project’s pools and is under investigation. However, on-chain investigators suspect it could be linked to North Korean hackers and be part of a larger-scale scheme.

Hackers Drain $6 Million From DeFi Protocol

On Monday morning, cyber security platform Cyvers Alerts informed the community about the ongoing attack on DeFi borrowing protocol Delta Primes. The initial report revealed that Cyvers’ system had detected multiple suspicious transactions involving the project on the Arbitrum chain.

The transactions suggested the DeFi protocol’s team had lost the private key, initially losing $4.5 million from the DPUSDC, DPARB, and DPBTCb pools. The suspicious draining address immediately swapped the USDC for Ethereum (ETH).

In the next hour, Cyvers detailed that the attackers had seemingly changed the proxy, pointing to a malicious address. Other reports explained that “this malicious contract can inflate the deposited amount of the hacker on all pools.”

The attackers drained another $1.48 million from the pools before Delta Prime’s team regained control. Two hours after the initial reports, the DeFi platform addressed the incident.

Per the post, DeltaPrime Blue, on the Arbritum chain, was attacked and drained for $5.98 million. The team confirmed that the attack was due to a compromised private key, with the cause still being investigated.

Delta Prime’s team also assured users that DetalPrime Red, on Avalanche, was safe from this attack, detailing that the “implementation here is covered solely by multisigs and cold wallets (as it should be).”

Additionally, the post claimed that the risk was already contained, reassuring its community that the DeFi protocol’s insurance pool would cover potential losses:

The risk is contained, we’re working on asset-retrieval and the insurance pool will cover any potential losses where possible / necessary. Additionally, we’re looking into other ways to reduce user losses to a minimum.

Are North Korean Hackers Responsible?

Despite the quick response, some users expressed their concerns about the incident. When questioned about it, the team explained that there were no timelocks for DeltaPrime Blue:

This is exactly what timelocks are for. The switch from this hot & non-timelocked owner to a cold timelocked owner should have been done on Arbitrum like it was on Avalanche (and like other initial owners on Arbi)

One community member criticized the team for not having the same security measures on DeltaPrime Blue and Red, stating there was no excuse for the mistake. Moreover, on-chain sleuth ZachXBT suggested that the attack could be linked to a larger-scale problem.

A month ago, Zach assisted another team with another crypto hack. The investigation unveiled that over 25 projects within the space had unknowingly hired multiple IT workers from North Korea using fake identities as developers.

Today, the crypto detective revealed that the DeFi protocol was among the teams he alerted about the North Korean IT workers in August. He also noted that the method used for Delta Prime’s exploit was similar to the hack he originally assisted.

As of this writing, Delta Prime’s team has not addressed the possible link. However, it stated that they would focus on getting the funds back and that “the event isn’t over yet.”


コメント

コメントを残す

メールアドレスが公開されることはありません。 が付いている欄は必須項目です

最新フィード

人気カテゴリー

ウェブサイトを検索

人気記事

タグ

#AlexeyPertsev (1) #Bidenクリプトバン (1) #Biden選挙 (1) #BinanceVsCoinbase (1) #ビットコイン (277) #BitcoinETF (3) #ビットコイン基礎知識 (1) #ビットコインの取り扱い (1) #Bビットコイン価格 (5) #BitcoinPriceLevel (1) #BitcoinPump (1) #BitcoinReserve (1) #ビットコイン・サージ (1) #Bitcoinトップ (1) #Bitfinex (1) #ビットワイズ (1) #BracebridgeCapital (1) #BRC20トークン (1) #BTC取得 (1) #Bullish予測 (1) #Bullishセンチメント (1) #中国鉱業 (1) #CPプレビュー (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #クリプトマニア (1) #CryptoMarket (4) #CryptoPrediction (1) #Crypto予測 (1) 1TP5トリプトレギュレーション (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty(暗号の不確実性 (1) #Dデリバティブジャンプ (1) #Dogecoin (48) #Dogecoinゲイン (1) #Dogecoinボリューム (1) #ダッチコート (2) #ECコマース (1) #ElSalvadorビットコイン (1) #Ethereum (57) #EthereumPain (1) #EthereumPrice (1) 1TP5専門家の意見 (1) #Fedレートカット (1) #FiatCurrency (1) #フィナンシャル・インパクト (1) #フィナンシャル・プライバシー (1) #Firmシャットダウン (1) #F凍結アカウント (1) 1TP5自己資金 (1) #InflationData (1) 1TP5投資 (1) 1TP5投資損失 (1) #日本ファーム (1) #法的措置 (1) 1TP5法的影響 (1) #法律 (1) #LightningNetwork (1) #市場分析 (3) #Mマーケットモニタリング (1) #M市場予測 (1) #市場予測 (1) #M市場予測 (1) #Mマーケットサポート (1) #マーケットボラティリティ (1) #マリッジ (1) #MemeCoin (5) #Memeコイン (2) #Miner収益性 (1) #マネーロンダリング (2) #MtGox (3) #北朝鮮暗号 (1) #ノボグラッツ予想 (1) #Priceマイルストーン (1) #P価格予測 (2) #Price質問 (1) #プライスサージ (1) #Prisonセンテンス (1) #QuantAnalysis (1) 1TP5規制圧力 (1) #SECアンチクリプト (1) #ShibaInu (4) #SocialBuzz (1) #技術分析 (1) #トンコイン (3) #トルネードキャッシュ (3) #TornadoCashDev (1) #TornadoCashデベロッパー (1) #UKクリプト (1) #Upsideポテンシャル (1) #USCongress(米国議会 (1) #ワイオミングランド (1) #XRP価格 (1) #XRPupswing (1)

お役立ちリンク

私が役に立ち、共有したいと思ったリンク