Four more attacks hit crypto between Friday and Monday, days after Binance's record hack. Early estimates put the drained total above $146M, with Brazil's largest exchange, an unnamed EU entity, BTCPay merchants and a dozen DeFi websites among the targets.
Four new attacks drained more than $146M by early estimates between Friday and Monday, days after Binance's record hack. The victims include Brazil's largest exchange, an unnamed EU entity and a dozen DeFi websites, plus an untallied amount from BTCPay merchants.
Mercado Bitcoin, Brazil's largest exchange, paused deposits and withdrawals on Monday after a security incident, saying clients lost nothing. Security firm Hypernative estimates that over $40M was drained across at least 10 blockchains, a figure the exchange hasn't confirmed.
Meanwhile, onchain sleuth ZachXBT says an EU entity is suspected of losing $106M+ from several exchange accounts on Nov. 1, with some funds converted to privacy coin Monero. He says he is confident it is not Lazarus Group, North Korea's hackers. Neither the victim nor the exchanges have been named.
Attackers also targeted merchants. They stole bitcoin and litecoin from hot wallets on outdated copies of BTCPay Server, a self-hosted payment processor, running version 2.4.1 or older. BTCPay hasn't given a loss total.
Late Friday, 12 DeFi sites registered with Name.com, including Kintsu and Origami, were redirected to a wallet drainer. The Block traced about $138K stolen.
Source: Bankless
Trading involves risk.