SlowMist founder Yu Xian tweeted that Orbit Bridge suffered a loss of at least $81.5 million. Preliminary analysis suggests that it was not a direct theft of private keys (although this possibility cannot be completely ruled out), but rather a vulnerability in the bridge or related centralized server that allowed attackers to deceive these private keys (7/10) to withdraw. Yu Xian also stated that the hacker's address can be viewed and pointed out that the hacker was preparing two days ago.
Welcome Back
Click “Sign in” to agree to Cointime’s Terms of Service and acknowledge that Cointime’s Privacy Policy applies to you.
Join CoinTime
Already have an account?
Click “page.Sign up” to agree to Cointime’s <a class="underline" href="#term-of-service">Terms of Service</a> and acknowledge that Cointime’s a class="underline" href="#privacy-policy">Privacy Policy</a> applies to you.
Sign in with email
Sign up with email
Your email
Check your inbox
Click the link we sent to to sign in.
Click the link we sent to to sign up.
Slow Mist Cosine: Preliminary analysis of Orbit Bridge is not that the private key was directly stolen, but more likely a vulnerability in the bridge or related centralized server issues
-
Wechat scan to share
Recommended for you
-
Crypto Banking in the UAE: The Path to Licensing and Compliance
Companies must meet several financial and operational criteria, such as minimum capital requirements and maintaining liquid assets. The licensing process can take between 4 to 12 months and involves significant costs.
-
Canadian wellness firm approves plan to add $1M of Bitcoin to treasury
Jiva Technologies CEO Lorne Rapkin said the move to add Bitcoin to the treasury is “a unique opportunity to strengthen our treasury with a resilient and innovative investment.”
-
Cosine: After a user used GPT to write a bot with a backdoor code, the private key was sent to a phishing website
SlowMist Yu Xian stated in a post on the X platform that a user used GPT to write a bot with code and sent the private key to a phishing website. The reason why the private key was stolen was because it was directly sent to the phishing website in the HTTP request body. Yu Xian reminded that when using LLM such as GPT/Claude, one must pay attention to the common fraudulent behavior of these LLM. It was previously mentioned that AI poisoning attacks were carried out, and now this is a real attack case targeting the crypto industry. -
Polymarket Blocks French Users Amid Government Investigation into Gambling Law Compliance
Polymarket has blocked users from France following reports of an investigation by the country's gaming authority for compliance with gambling laws. The ban was not stated in Polymarket's terms of service, but French users attempting to access the website using a VPN from a French server were met with a digital blockade. The ANJ, France's national gaming authority, began investigating Polymarket after a French trader placed large bets on Donald Trump winning the 2024 US Presidential election. -
Yao Qian, former director of the Science and Technology Supervision Department of the China Securities Regulatory Commission, was expelled from the party and removed from public office for allegedly u
the Discipline Inspection and Supervision Team of the Central Commission for Discipline Inspection and the National Supervision Commission stationed in the China Securities Regulatory Commission and the Supervision Commission of Shantou City, Guangdong Province, recently conducted disciplinary review and supervision investigations into Yao Qian, former director of the Science and Technology Supervision Department of the China Securities Regulatory Commission and former director of the Information Center, for serious violations of discipline and law. -
SlowMist: Will help law enforcement agencies track down the stolen funds from DEXX. Currently, about 2,000 suspicious addresses have been roughly identified.
SlowMist announced on X platform that its team will assist law enforcement agencies in tracking stolen funds and analyzing related clues. A complete list of hacker addresses will soon be released with DEXX. Currently, about 2,000 suspicious addresses have been roughly identified. -
DEXX: If all assets are recovered, full compensation will be given immediately
DEXX, the on-chain trading terminal, has released an update regarding the previous security incident. DEXX has officially filed a lawsuit and the SlowMist team is actively assisting law enforcement in the follow-up investigation. At the same time, DEXX is actively discussing compensation plans. Regarding compensation: -
SlowMist: DEXX incident has identified more than 900 victims, with total losses estimated at $21 million
blockchain security company SlowMist announced that as of November 18th, the DEXX incident report has been updated: more than 1,100 reports of funds being stolen have been received from the community. After removing duplicate reports, it has been confirmed that there are more than 900 victims, with a total estimated loss of $21 million (affected by price fluctuations). Loss details (so far): -
Rapper 50 Cent claims that his X account was hacked, and the hacker promoted cryptocurrency and defrauded about $300 million
On June 22nd,famous rapper Curtis James Jackson III (stage name "50 Cent") claimed that his former Twitter account and website were hacked, resulting in hackers promoting a cryptocurrency scam and defrauding victims of $30 million.The hackers created a new cryptocurrency called "GUNIT" and used 50 Cent's large following (approximately 12.9 million fans) to attract more investors and drive up the price, then drained its value, causing the token price to plummet to $0.00016. On June 21st, 50 Cent posted on Instagram to his 32.8 million fans about the hack and admitted that a large amount of funds from victims had been lost from the project. "Twitter quickly locked my account. Whoever did this, got $30 million within 30 minutes," 50 Cent claimed, stating that he had no involvement with this cryptocurrency scam. -
DeFi project BXH hacker transferred 9491 ETH via Tornado Cash 5 hours ago
The hacker who stole over $130 million in assets from the DeFi project BXH on October 30, 2021, transferred 9,491 ETH (worth $31.38 million) through Tornado Cash five hours ago, as monitored by blockchain analyst Yu Jin. The hacker collected a total of 9,491 ETH through three addresses and deposited all of these ETH into Tornado Cash through the 0xda9...ad3 address.
Daily Must-Read
-
Uniswap Labs, UNI holders could make $468M a year from new L2: DeFi Report
-
Avalanche Foundation to buy back nearly 2M AVAX sold to Terra in 2022
-
Gold Fever Hits Costco: 77% of Stores Sell Out Amid Soaring Demand for Bullion
-
$500M Bitcoin Buried in Landfill: Man Sues City After Decade-Long Battle for Recovery
-
Former BAYC creative director Jeff Nicholas joins Meta’s Reality Labs
-
Why is Solana's Dogwifhat (WIF) memecoin crashing?
All Comments