Balancer confirms social engineering attack caused front end issues

The decentralized finance protocol Balancer suffered an exploit attack for nearly $900,000 in just a few days after a critical vulnerability was discovered.

The Balancer team said a DNS attack was the source of an issue on its interface that was discovered on Sep. 20. Per reports, hackers stole $238,000 and users were advised to avoid interacting with the project’s website.

The matter was previously under investigation, as crypto.news reported following an alert from Balancer.

According to a later update, the protocol’s domains have now been secured by the Balance DAO, a decentralized autonomous organization that manages the Ethereum-based automated market maker.

The team traced the attack to a compromised domain registrar and warned other projects to take necessary measures.

After investigation, it is clear that this was a social engineering attack on EuroDNS, the domain registrar used for .fi TLDs. We are exploring deprecating the .fi TLD in order to move to a more secure registrar and suggest that other projects using the TLD do the same.

Balancer on X

Attackers infiltrated Balancer’s website with a malicious prompt that sought access to users’ non-custodial wallets. Some users fell prey and hackers stole $238,000 worth of crypto, according to on-chain investigator ZachXBT. 

The DNS attack brought Balancer’s total losses to $1.1 million in 30 days. Indeed, the decentralized platform previously lost $900,000 due to a critical bug exploited by hackers.

Balancer counts among several crypto service providers mobbed by exploits and cyber attacks. Centralized crypto exchanges CoinEx and Remitano both suffered hacks, losing millions of dollars in crypto.

Hackers also exploited decentralized finance (defi) protocols Arcadia Finance and Euler Finance.

You might also like: DeFi lending protocol, Hundred Finance, hacked for $7.4m

Digital asset participants and U.S. authorities believe that state-funded North Korean hacker group Lazarus was responsible for a flurry of exploits on platforms like crypto casino Stake, payments processor CoinsPaid, and wallet provider Atomic Wallet among others.

These incidents perhaps underscore security concerns from both crypto skeptics and proponents alike as the nascent industry seeks to establish itself as a legitimate industry capable of safeguarding users’ assets.

Read more: Hackers stole over $6b from DeFi protocols in 2022
Follow Us on Google News

Comments

Post a Comment

Popular posts from this blog

Dogecoin Forecasted to Hit $1: Here's When

Image
Dogecoin, initially conceived as a humorous cryptocurrency, has witnessed a notable surge in both popularity and market value throughout its existence. The asset managed to reach a peak of $0.1063 earlier in the same week. However, at press time, DOGE was trading at $0.09657 with a 5% daily drop. Market Dynamics and Open Interest A pivotal factor propelling Dogecoin ’s recent surge lies in the notable increase in notional open interest linked to DOGE futures and perpetual futures contracts. According to data from CoinGlass, there has been a remarkable 58% surge in open interest over the preceding week, reaching a substantial $625 million. This figure stands as the highest since Nov. 2, 2022, and industry experts contend that this surge, coupled with the rising price, validates a significant upward trend in the market. The Path to $1 As Dogecoin gains momentum and successfully breaches various resistance levels, the prevailing question among investors centers on its potential to at
Read more

SEC sues Kraken crypto exchange due to illegal operation

The U.S. Securities and Exchange Commission has filed a lawsuit against Kraken, accusing it of illegal securities operations. According to Reuters, the SEC accused the platform of illegally operating as a securities exchange without first registering with the regulator. The SEC said Payward Inc. and Payward Ventures Inc., operating under the name Kraken, have made hundreds of millions of dollars since 2018 by organizing the buying and selling of cryptocurrencies while “turning a blind eye” to securities laws designed to protect investors. The crypto currency exchange was also accused of insufficient internal controls and poor record keeping, partly reflected by commingling clients’ money with its own and paying operating expenses directly from clients’ accounts. “Kraken’s choice of malicious profits over investor protection is one we see far too often in this space.” Gurbir Grewal, SEC enforcement chief In a statement, Kraken said the SEC’s complaint acknowledges that any all
Read more

Robinhood increases crypto trading volume by 75% in Nov.

Investment firm Robinhood has released a report on some of its operating activity for Nov. 2023.  According to the document, the volume of cryptocurrency trading on the platform increased by 75% compared to October. Financial turnover from transactions with shares and option contracts remained at the same level as in Oct. 2023. Robinhood representatives also noted that over the past month customers made deposits amounting to $1.4 billion into the company’s accounts. “In November 2023, customers contributed roughly $1.4 billion of net deposits to Robinhood. Additionally, November equity notional trading volume s and options contracts traded were roughly in line with October 2023 levels, and November crypto notional trading volume s were roughly 75% above October 2023 levels.  Robinhood report The firm plans to release a detailed operating report for the fourth quarter of 2023 in the coming weeks. You might also like: Robinhood carries out third round of layoffs Robin
Read more