Crypto-Sec: $11M Bittensor phish, UwU Lend and Curve fake news, $22M Lykke hack

CoinMarketCap06-17

Crypto-Sec is our bi-weekly round-up of crypto and cybersecurity stories and tips. Biggest phish of the week: TAO holder loses $11.2 million In the largest reported phishing attack so far in June, a ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2444919761?lang=en_US&edition=fundamental","thumbnail":"https://academy-public.coinmarketcap.com/srd-optimized-uploads/6eb3217d41e94b60806e6da11d1e3164.jpeg","is_english":true,"pubTime":"2024-06-17 23:39","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2444919761","market":"us","top_or_hot":-1,"title":"Crypto-Sec: $11M Bittensor phish, UwU Lend and Curve fake news, $22M Lykke hack","media":"CoinMarketCap","content":"<div>\n<p>Crypto-Sec is our bi-weekly round-up of crypto and cybersecurity stories and tips. \nBiggest phish of the week: TAO holder loses $11.2 million\nIn the largest reported phishing attack so far in June, a ...</p>\n\n<a href=\"https://coinmarketcap.com/community/articles/667058b2fcd88c6fc9df85f5/\">Source Link</a>\n\n</div>\n","source":"coinmarketcap_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Crypto-Sec: $11M Bittensor phish, UwU Lend and Curve fake news, $22M Lykke hack</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nCrypto-Sec: $11M Bittensor phish, UwU Lend and Curve fake news, $22M Lykke hack\n</h2>\n\n<h4 class=\"meta\">\n\n\n2024-06-17 23:39 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://coinmarketcap.com/community/articles/667058b2fcd88c6fc9df85f5/><strong>CoinMarketCap</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Crypto-Sec is our bi-weekly round-up of crypto and cybersecurity stories and tips. \nBiggest phish of the week: TAO holder loses $11.2 million\nIn the largest reported phishing attack so far in June, a ...</p>\n\n<a href=\"https://coinmarketcap.com/community/articles/667058b2fcd88c6fc9df85f5/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BK4581","symbol_name":"高盛持仓","start_time":0,"source_url":"https://coinmarketcap.com/community/articles/667058b2fcd88c6fc9df85f5/","article_id":"2444919761","we_media_id":null,"thumbnails":["https://academy-public.coinmarketcap.com/srd-optimized-uploads/6eb3217d41e94b60806e6da11d1e3164.jpeg"],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2444919761","pubTimestamp":1718638762,"sourceInfo":{"source_id":"coinmarketcap_highlight","name":"CoinMarketCap"},"weMediaInfo":null,"summary":"Crypto-Sec is our bi-weekly round-up of crypto and cybersecurity stories and tips. Biggest phish of the week: TAO holder loses $11.2 million In the largest reported phishing attack so far in","collect":0,"end_time":0,"defaultTopTitle":"coinmarketcap.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"BK4581":"高盛持仓","BTC":"ClearShares Piton Intermediate Fixed Income ETF","IE0034235188.USD":"PINEBRIDGE GLOBAL FOCUS EQUITY \"A\" (USD) ACC","LU0149725797.USD":"汇丰美国股市经济规模基金","IE00BKVL7J92.USD":"Legg Mason ClearBridge - US Equity Sustainability Leaders A Acc USD","LU0127658192.USD":"EASTSPRING INVESTMENTS GLOBAL TECHNOLOGY \"A\" (USD) ACC","IE00BJTD4N35.SGD":"Neuberger Berman US Long Short Equity A1  Acc SGD-H","BK4528":"SaaS概念","BK4516":"特朗普概念","BK4201":"综合性石油与天然气企业","IE00B775SV38.USD":"NEUBERGER BERMAN US MULTICAP OPPORTUNITIES \"A\" (USD) ACC","BK4592":"伊斯兰概念","IE00BFSS7M15.SGD":"Janus Henderson Balanced A Acc SGD-H","LU0170899867.USD":"EASTSPRING INVESTMENTS WORLD VALUE EQUITY  \"A\" (USD) ACC","IE0034235295.USD":"PINEBRIDGE GLOBAL DYNAMIC ASSET ALLOCATION \"A\" (USD) ACC","LU0072462426.USD":"贝莱德全球配置 A2","IE00BJJMRX11.SGD":"Janus Henderson Balanced A Acc SGD","BK4567":"ESG概念","BK4585":"ETF&股票定投概念","IE00BJTD4V19.USD":"NEUBERGER BERMAN US LONG SHORT EQUITY \"A1\" (USD) ACC","BK4576":"AR","LU0079474960.USD":"联博美国增长基金A","IE00BDCRKT87.USD":"PINEBRIDGE GLOBAL DYNAMIC ASSET ALLOCATION \"ADC\" (USD) INC","GB00BDT5M118.USD":"天利环球扩展Alpha基金A Acc","LU0056508442.USD":"贝莱德世界科技基金A2","BK4525":"远程办公概念","BK4566":"资本集团","BK4587":"ChatGPT概念","IE00BJJMRY28.SGD":"Janus Henderson Balanced A Inc SGD","TAO":"中国房地产指数ETF-Guggenheim","BK4577":"网络游戏","BK4527":"明星科技股","BK4538":"云计算","IE00BSNM7G36.USD":"NEUBERGER BERMAN SYSTEMATIC GLOBAL SUSTAINABLE VALUE \"A\" (USD) ACC","IE00BMPRXN33.USD":"NEUBERGER BERMAN 5G CONNECTIVITY \"A\" (USD) ACC","LU0109392836.USD":"富兰克林科技股A","BK4579":"人工智能","LU0171293334.USD":"贝莱德英国基金A2","BK4588":"碎股","BK4550":"红杉资本持仓","BK4503":"景林资产持仓","MSFT":"微软","IE0004445015.USD":"JANUS HENDERSON BALANCED \"A2\" (USD) ACC","LU0011850046.USD":"贝莱德全球长线股票 A2 USD","LU0175139822.USD":"AB FCP I Global Equity Blend A USD","CVE":"Cenovus能源","LU0097036916.USD":"贝莱德美国增长A2 USD","BK4097":"系统软件"},"translate_title":"Crypto-Sec：1100万美元的Bittensor网络钓鱼、UwU Lend和Curve假新闻、2200万美元的Lykke黑客攻击","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"TAO":1,"CVE":1,"BTC":1,"MSFT":0.9},"content_text":"Crypto-Sec is our bi-weekly round-up of crypto and cybersecurity stories and tips. \nBiggest phish of the week: TAO holder loses $11.2 million\nIn the largest reported phishing attack so far in June, a user of the Bittensor (TAO) artificial intelligence platform lost over 28,000 tokens worth $11.2 million at the time. The attack was reported by onchain sleuth ZachXBT through his Telegram channel.\nThe attacker split up the funds into 18 different wallet accounts, which then consolidated them into 16 accounts, ZachXBT reported. Afterward, the 16 accounts bridged the tokens from the TAO network to Ethereum and swapped them for ETH and USDC stablecoin using three different decentralized exchanges.\n\nReported phishing attack against TAO holder. (ZachXBT)\n\n\nSplitting up funds into multiple wallets and then recombining them is a common tactic of scammers and is designed to circumvent money laundering detection systems on centralized exchanges. It is this pattern of splitting and recombining that apparently led ZachXBT to conclude that this was a phishing attack.\nA crypto phishing attack is a type of scam in which the attacker creates a fake website that appears to be part of a legitimate protocol, such as a decentralized exchange or lending app. But the site is, in fact, malicious and not authorized by the legitimate protocols team. When the user authorizes their tokens to be spent by the fraudulent app, it steals them instead of doing what the user expected.\nPhishing scams are one of the most common ways for crypto users to lose their funds from an attack.\n\n\n\n\nWhite hat corner: Microsoft patches zero-click vulnerability\nAccording to Security Week, Microsoft has patched a vulnerability that could have allowed attackers to execute code on Outlook users devices without requiring them to download or execute a file. Cybersecurity firm Morphisec reportedly discovered the flaw.\nThe potential attack only required the user to open a malicious email rather than needing to download or run a file. For this reason, Morphisec referred to the flaw as a zero-click vulnerability.\nMorphisec reported that the flaw allowed attackers to exfiltrate data, gain unauthorized access to systems, and perform other malicious activities. \nCrypto software wallets use key vault files stored on the device to sign transactions, so these files could potentially have been stolen through such an attack and led to crypto losses.\nDespite Microsofts patch, some devices may still be running older versions of Outlook, so [u]sers are advised to update their Outlook clients as soon as possible, the report stated.\n\nMicrosoft Common Vulnerabilities and Exposures (CVE) report on the Outlook flaw. (Microsoft)\n\n\nMicrosoft listed the vulnerability as important but did not label it as critical. The flaw affected earlier versions of Outlook 2016, Office LTSC 2021, 365 Apps for Enterprise, and Office 2019, but the most current versions of these apps are not vulnerable.\n\n\n  Read also\n \n\n Features Banking The Unbanked? How I Taught A Total Stranger In Kenya About Bitcoin\n\n Features Decentralized identity: Proving its really you in the 21st Century\n\n\n\nDeFi exploit of the week: UwU Lend gets exploited twice\nDeFi protocol UwU Lend On Ethereum was exploited twice by the same attacker over a period of three days. The first attack occurred on June 10 and drained $20 million from the protocol, while the June 13 second attack drained an additional $3.7 million, according to reports from blockchain security platforms Peck Shield and Cyvers.\nIn a June 12 X post, the team acknowledged the first attack, stating that the attacker had manipulated the price oracle for Ethena Staked USD (sUSDe), but the team patched the vulnerability once it was discovered. The team has now identified the vulnerability, which was unique to the sUSDe market oracle and has now been resolved, it claimed.\nAccording to blockchain security platform Peck Shield, the attacker manipulated the sUSDe oracle used by the protocol, causing it to show false prices. This allowed some liquidity pools to lend $20M more than they otherwise would have been able to. The attacker then pocketed these funds for themselves and did not pay back the loans.\n\n(Peck Shield)\n\n\nTo explain in more detail: The protocols sUSDe oracle used an average price derived from multiple liquidity pools. Using large flash loans, the attacker was able to change the prices in four of these pools: FRAXUSDe, USDeUSDC, USDeDAI, USDecrvUSD and GHOUSDe. This affected the price recorded by the sUSDe oracle, which in turn changed the collateral requirements for loans in the protocol. The attacker used these altered requirements to take out insufficiently collateralized loans, allowing them to default on the loans and run off with the borrowed funds.\nRelated: What are flash loans in DeFi?\nSome $14.4 million worth of drained funds were sent to an account ending in EB70, and another $4.6 million were transferred to an account ending in 5EB6. The stolen loot consists entirely of Ether (ETH), as the attacker swapped all other tokens for ETH immediately following the attack.\nOn June 12, the UwU team announced that it had paid back the bad debt for Tether (USDT), DAI, and crvUSD, allowing these markets to relaunch.\n\nUwU Lend interface showing relaunched markets. (UwU Lend)\n\n\nRelated: UwU Lend Hit by $20m Hack\nHowever, on the day after this announcement, Cyvers announced that the attacker had executed a second exploit against UwU Lend. This second attack targeted the uDAI, uWETH, uLUSD, uFRAX, uCRVUSD, and uUSDT pools, draining $3.7 million from them.\nThe exploit of UwU Lned had knock-on effects, which ended with the Curve CRV token going into freefall and its multiple-mansion-owning founder, Michael Egorov, liquidated for a $140 million stablecoin position.\nThis led to news reports stating that Egorov has proposed burning 10% of the CRV token supply, valued at $37 million, to help stabilize the token’s price.\nSadly, the burn story was a hoax tweeted by an Egorov impersonator attempting to phish users. The real Egorov told Cointelegraph:\n\nThis information was tweeted by a fake (impersonator) account, accompanied by a scam link. Few journalists did not fact-check the news and published news about this.\n\n\n\n  Read also\n \n\n Features Unforgettable: How Blockchain Will Fundamentally Change the Human Experience\n\n Art Week Coldie And Citadel 6.15: The Creator, The Collector, The Curator\n\n\n\nDeepfake scams: OKX user loses $2m\nAccording to a translated report from Chinese crypto media outlet Wu Blockchain, one OKX user lost over $2 million from a deepfake scam generated through artificial intelligence (AI). The attackers purchased Lai J. Fang Changs personal data on Telegram and used it to create a video application synthesized by AI to change mobile phone number. \nThe video reportedly tricked staff on the OKX platform into authorizing changes to Changs password, email address and Google Authenticator device, bypassing all two-factor authentication controls. The attackers then withdrew all of Changs crypto into wallet accounts under their control.\nAccording to the report, OKX is currently investigating the attack.\nRelated: AI-driven crypto crime is only just beginning Elliptic report\nCEXs: SomaXBT claims hack coverup on Lykke exchange\nOn June 9, blockchain researcher SomaXBT accused Lykke exchange of hiding its $22 million loss from a June 4 hack. The researcher started looking into the matter after noticing that several Lykke users had complained of being unable to withdraw funds. The exchange had reportedly stated on Discord that the platform was undergoing maintenance.\nBut after investigating, SomaXBT discovered that over $19 million of Bitcoin (BTC) and ETH had been transferred from multiple wallet accounts into a new address, which he says implies that the exchange may have been hacked. The researcher claimed that Lykke was still trying to hide this fact, as five days had passed without the exchange making an official statement.\nThe following day, Lykke acknowledged the attack and expressed apologies to its users for the inconvenience of not being able to withdraw. It also promised to repay all users, claiming that it has solid capital reserves and a diverse portfolio with which to do this.\nRelated: Lykke crypto exchange acknowledges hack after halting withdrawals\n\n\n\n\n\n     Subscribe\n    \n\n     The most engaging reads in blockchain. Delivered once a week.\n    \n\n\n\n\n\n     \n\n\nEmail address\n\nSUBSCRIBE","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":null,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.24.2","shortVersion":"4.24.2","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2444919761"}