Digital Asset
Intelligence

Hacked Event Broadcast

Live source archive

Verified blockchain security incidents with original evidence and historical event dates.

Filters

Historical events use their original event dates. Latest event dates first. Severity follows existing archive classifications.

Jul 7, 2024

1 verified update
Polkadot issued a warning on Twitter, alerting users that the official Twitter account of Interlay, a cross-chain interoperability project, was compromised and used to post a scam message. Users are advised to be cautious and avoid clicking any links.ExpandCollapse

Polkadot issued a warning on Twitter, alerting users that the official Twitter account of Interlay, a cross-chain interoperability project, was compromised and used to post a scam message. Users are advised to be cautious and avoid clicking any links.

Attack method
Account Compromise
Polkadot EcosystemSecurity

Jul 5, 2024

1 verified update
23pds, the CISO at SlowMist, tweeted that the 2FA service Authy has been hacked, resulting in the theft of the phone numbers of 33 million users. If you are an Authy user, please be vigilant against phishing attacks. The official developer, Twilio, has confirmed the vulnerability. Many professionals in the crypto industry use this 2FA software, so please ensure the security of your assets.ExpandCollapse

23pds, the CISO at SlowMist, tweeted that the 2FA service Authy has been hacked, resulting in the theft of the phone numbers of 33 million users. If you are an Authy user, please be vigilant against phishing attacks. The official developer, Twilio, has confirmed the vulnerability. Many professionals in the crypto industry use this 2FA software, so please ensure the security of your assets.

Attack method
Information Leakage
OtherSecurity

Jul 2, 2024

4 verified updates
On July 2, 2024, the decentralized AI project Bittensor was attacked, resulting in some Bittensor wallet users being compromised. The hackers stole approximately 32,000 TAO tokens, valued at around $8 million. On-chain investigator ZachXBT suggested that the attack may have been due to a private key leak. However, Bittensor later clarified that the affected users were actually compromised because a malicious Bittensor package had been uploaded to the Python PyPi package manager.ExpandCollapse

On July 2, 2024, the decentralized AI project Bittensor was attacked, resulting in some Bittensor wallet users being compromised. The hackers stole approximately 32,000 TAO tokens, valued at around $8 million. On-chain investigator ZachXBT suggested that the attack may have been due to a private key leak. However, Bittensor later clarified that the affected users were actually compromised because a malicious Bittensor package had been uploaded to the Python PyPi package manager.

Amount of loss
$ 8,000,000
Attack method
Security Vulnerability
WalletSecurity
MintRisesPrices on BNBChain suffered a reentrancy attack, resulting in a loss of approximately $59,000.ExpandCollapse

MintRisesPrices on BNBChain suffered a reentrancy attack, resulting in a loss of approximately $59,000.

Amount of loss
$ 59,000
Attack method
Reentrancy Attack
OtherSecurity
According to Cointelegraph, the Twitter account of American actress Sydney Sweeney was hacked, with now-deleted posts promoting a crypto token bearing her name in an apparent pump-and-dump scheme.ExpandCollapse

According to Cointelegraph, the Twitter account of American actress Sydney Sweeney was hacked, with now-deleted posts promoting a crypto token bearing her name in an apparent pump-and-dump scheme.

Attack method
Account Compromise
OtherSecurity
The Fake TRUMP (MAGA) on BNBChain is suspected of a rug pull, and the current token price has dropped by 100%.ExpandCollapse

The Fake TRUMP (MAGA) on BNBChain is suspected of a rug pull, and the current token price has dropped by 100%.

Amount of loss
$ 957,552
Attack method
Rug Pull
OtherSecurity

Jul 1, 2024

2 verified updates
On July 1, according to Protos, the crypto-friendly bank Evolve Bank & Trust recently admitted that despite discovering "unauthorized activity"—specifically, the theft of 33 TB of user data—a month ago, they only publicly disclosed the incident last week. Reportedly, the stolen data pertains to 155,586 accounts associated with companies like Bitfinex, Nomad, and Copper. The bank stated that the data breach was due to an employee clicking on a malicious link and that the attack was halted within a few days, with no further unauthorized activity detected.ExpandCollapse

On July 1, according to Protos, the crypto-friendly bank Evolve Bank & Trust recently admitted that despite discovering "unauthorized activity"—specifically, the theft of 33 TB of user data—a month ago, they only publicly disclosed the incident last week. Reportedly, the stolen data pertains to 155,586 accounts associated with companies like Bitfinex, Nomad, and Copper. The bank stated that the data breach was due to an employee clicking on a malicious link and that the attack was halted within a few days, with no further unauthorized activity detected.

Attack method
Information Leakage
OtherSecurity
According to screenshots shared by X user @bmgentile, the modular chain abstraction Layer 1 project Particle Network issued an official apology statement. They stated that their account email was recently hacked and used to send phishing emails, inviting users to participate in the PARTl presale. Please stay vigilant against related risks as the official team investigates the matter.ExpandCollapse

According to screenshots shared by X user @bmgentile, the modular chain abstraction Layer 1 project Particle Network issued an official apology statement. They stated that their account email was recently hacked and used to send phishing emails, inviting users to participate in the PARTl presale. Please stay vigilant against related risks as the official team investigates the matter.

Attack method
Account Compromise
BlockchainSecurity

Jun 30, 2024

1 verified update
The cross-chain DeFi protocol Entangle announced on X that the official X account of the meme token project BorpaToken, developed by their team, has been compromised. Do not click on any links. The BorpaToken team is in contact with X to resolve the issue.ExpandCollapse

The cross-chain DeFi protocol Entangle announced on X that the official X account of the meme token project BorpaToken, developed by their team, has been compromised. Do not click on any links. The BorpaToken team is in contact with X to resolve the issue.

Attack method
Account Compromise
BridgeSecurity

Jun 27, 2024

1 verified update
According to Cyber's official Twitter, the Discord server @BuildOnCyber of the decentralized social L2 Cyber (formerly CyberConnect) was compromised. A phishing link was posted in the announcements channel and all permissions have been stripped. Do not interact with the attached announcement, Do not click any links.ExpandCollapse

According to Cyber's official Twitter, the Discord server @BuildOnCyber of the decentralized social L2 Cyber (formerly CyberConnect) was compromised. A phishing link was posted in the announcements channel and all permissions have been stripped. Do not interact with the attached announcement, Do not click any links.

Attack method
Account Compromise
OtherSecurity

Jun 26, 2024

1 verified update
APEMAGA on Ethereum suspected to have been attacked, resulting in a loss of approximately $32,000.ExpandCollapse

APEMAGA on Ethereum suspected to have been attacked, resulting in a loss of approximately $32,000.

Amount of loss
$ 32,000
Attack method
Unknown
ETH EcosystemSecurity

Jun 25, 2024

1 verified update
According to Decrypt, the social media account of the renowned heavy metal band Metallica were recently hacked. The hackers used these accounts to promote scam cryptocurrency tokens. Several celebrities were also implicated, becoming tools for the scam's promotion. The hackers posted false information to entice fans and investors into purchasing worthless tokens.ExpandCollapse

According to Decrypt, the social media account of the renowned heavy metal band Metallica were recently hacked. The hackers used these accounts to promote scam cryptocurrency tokens. Several celebrities were also implicated, becoming tools for the scam's promotion. The hackers posted false information to entice fans and investors into purchasing worthless tokens.

Attack method
Account Compromise
OtherSecurity

Jun 23, 2024

3 verified updates
Arthur (@Arthur_0x), the founder of DeFiance Capital, posted on X to warn that the official X account of DeFiance Capital has been compromised. Please avoid clicking on any links shared by the account.ExpandCollapse

Arthur (@Arthur_0x), the founder of DeFiance Capital, posted on X to warn that the official X account of DeFiance Capital has been compromised. Please avoid clicking on any links shared by the account.

Attack method
Account Compromise
OtherSecurity
According to the latest official blog post by the Ethereum Foundation, their email account was hacked, and phishing emails were sent to 35,794 recipients. The email falsely claimed that the Foundation was partnering with LidoDAO to offer a 6.8% Ethereum staking yield. If users clicked the link in the email and approved the transaction, their wallets would be drained. The Foundation quickly halted the malicious emails, closed the attack vector, and ensured that the hackers could no longer access the email account. The investigation revealed that the hackers obtained 81 new email addresses during the attack, but no victims lost any funds.ExpandCollapse

According to the latest official blog post by the Ethereum Foundation, their email account was hacked, and phishing emails were sent to 35,794 recipients. The email falsely claimed that the Foundation was partnering with LidoDAO to offer a 6.8% Ethereum staking yield. If users clicked the link in the email and approved the transaction, their wallets would be drained. The Foundation quickly halted the malicious emails, closed the attack vector, and ensured that the hackers could no longer access the email account. The investigation revealed that the hackers obtained 81 new email addresses during the attack, but no victims lost any funds.

Attack method
Account Compromise
ETH EcosystemSecurity
According to monitoring by on-chain detective ZachXBT, the online gambling platform Sportsbet was also suspected to be attacked by the same hacker as BtcTurk, resulting in a loss of over $3.5 million.ExpandCollapse

According to monitoring by on-chain detective ZachXBT, the online gambling platform Sportsbet was also suspected to be attacked by the same hacker as BtcTurk, resulting in a loss of over $3.5 million.

Amount of loss
$ 3,500,000
Attack method
Unknown
OtherSecurity

Jun 22, 2024

3 verified updates
The rapper 50 Cent has claimed that his Twitter account and website were hacked to promote a memecoin called GUNIT.ExpandCollapse

The rapper 50 Cent has claimed that his Twitter account and website were hacked to promote a memecoin called GUNIT.

Attack method
Account Compromise
OtherSecurity
The Turkish cryptocurrency exchange BtcTurk has acknowledged that they suffered a hack. The exchange halted deposits and withdrawals while investigating, and said they are working with law enforcement. Furthermore, the exploiter sold substantial amounts of some cryptocurrencies, including Luna Classic, causing major price movements in those tokens.ExpandCollapse

The Turkish cryptocurrency exchange BtcTurk has acknowledged that they suffered a hack. The exchange halted deposits and withdrawals while investigating, and said they are working with law enforcement. Furthermore, the exploiter sold substantial amounts of some cryptocurrencies, including Luna Classic, causing major price movements in those tokens.

Amount of loss
$ 90,000,000
Attack method
Unknown
ExchangeSecurity
Cryptocurrency portfolio management company CoinStats temporarily suspended user activities after 1,590 crypto wallets were affected by a security incident. CoinStats stated, "The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident. None of the connected wallets and CEXes were impacted. Thanks to the immediate incident reponse from the CoinStats team, only 1.3% of all CoinStats Wallets were affected, totaling 1,590 wallets. The list might change as the investigation is ongoing but we don’t expect significant changes." On June 26, Narek Gevorgyan released a security incident update, stating that the security vulnerability was due to the company's AWS infrastructure being hacked. Evidence indicates that it was done through one of employees who was socially engineered into downloading malicious software onto his work computer.ExpandCollapse

Cryptocurrency portfolio management company CoinStats temporarily suspended user activities after 1,590 crypto wallets were affected by a security incident. CoinStats stated, "The attack has been mitigated, and we have temporarily shut down the application to isolate the security incident. None of the connected wallets and CEXes were impacted. Thanks to the immediate incident reponse from the CoinStats team, only 1.3% of all CoinStats Wallets were affected, totaling 1,590 wallets. The list might change as the investigation is ongoing but we don’t expect significant changes." On June 26, Narek Gevorgyan released a security incident update, stating that the security vulnerability was due to the company's AWS infrastructure being hacked. Evidence indicates that it was done through one of employees who was socially engineered into downloading malicious software onto his work computer.

Amount of loss
$ 2,000,000
Attack method
Malware Attack
OtherSecurity

Jun 21, 2024

1 verified update
The Fake CGPT on BNBChain is suspected of a rug pull, and the current token price has dropped by 100%.ExpandCollapse

The Fake CGPT on BNBChain is suspected of a rug pull, and the current token price has dropped by 100%.

Amount of loss
$ 19,550
Attack method
Rug Pull
OtherSecurity

Jun 17, 2024

2 verified updates
According to monitoring by the SlowMist security team, Dyson on BNBChain was attacked, resulting in a loss of approximately $31,000.ExpandCollapse

According to monitoring by the SlowMist security team, Dyson on BNBChain was attacked, resulting in a loss of approximately $31,000.

Amount of loss
$ 31,000
Attack method
Contract Vulnerability
OtherSecurity