The cross-chain lender that once held more than $300M in deposits now has $2.21M in total value locked, a sub-$2M market cap, and no remaining major-exchange listing — the slow end-state of an October 2024 exploit Mandiant traced to North Korea.
Code vulnerabilities were responsible for the bulk of the damage in May — roughly 66% of the month’s total losses, or about $45 million. That breakdown, drawn from data released by blockchain security firm CertiK, came alongside broader figures showing that overall crypto exploit losses fell to $68 million last month, down sharply from $650 […]
On-chain traces show the DPRK-linked attacker behind April's $292 million bridge exploit has pushed the unfrozen ~$220 million through THORChain, Wasabi, Tornado Cash, and Umbra, leaving roughly $1.7 million still sitting in the original wallet.
Co-founder Martin Köppelmann said the company will make all users whole after attackers exploited the smart-contract module that governs Gnosis Pay card accounts. No loss figure has been disclosed.
Gnosis Pay faces an active exploit in its delay module as co‑founder Martin Köppelmann walks back a warning urging users to withdraw funds and vows to repay those affected.
The post Gravity Bridge Loses $5,4M in Suspected Key Compromise Attack appeared on BitcoinEthereumNews.com.
According to blockchain security researchers, the incident may have been caused by a compromised contract key, which allowed an attacker to withdraw millions in USDC, WETH, USDT, and PAXG. After the exploit, the Gravity Bridge team halted bridge operations and instructed validators to stop their validators and orchestrators while the incident is investigated. Hackers Steal $5.4M From Gravity Bridge Gravity Bridge, a decentralized cross-chain protocol that enables asset transfers between the Ethereum and Cosmos ecosystems, suffered a major security incident that resulted in the loss of approximately $5.4 million worth of digital assets. The exploit was first identified by on-chain analyst Specter, who reported unusual outflows from the protocol and suggested that the bridge’s contract key may have been compromised. According to Specter, the suspected compromise allowed an attacker
Explore what Radiant Capital is, the problem it targets, how its token functions, ecosystem context, and risks for users and investors.
The post Radiant Capital Explained: Cross-Chain Lending And Token Use appeared first on BiteMyCoin.
The post Fake Bridge Messages Let Hacker Drain $815,000 From Alephium appeared on BitcoinEthereumNews.com.
Alephium’s (ALPH) TokenBridge was drained of approximately $815,000 after an attacker exploited a flaw that allowed forged messages to pass through the protocol’s guardian network and authorize fraudulent token transfers. The Alephium team confirmed that blockchain security firm Blockaid was the first to detect the exploit. The Security Alliance’s SEAL_911 emergency response unit also provided assistance and responsiveness throughout the subsequent investigation. Exploit Drains $815,000 in Under 7 Minutes The attacker moved funds from the Alephium TokenBridge on both Ethereum and BNB Chain in roughly seven minutes. On Ethereum, losses included 200,967 Tether (USDT), 17,594 USD Coin (USDC), 5.18 Wrapped Ether (WETH), and 0.335 Wrapped Bitcoin (WBTC). An additional 36,750 USDT and 24.386 Wrapped BNB were removed from the BNB Chain side of the bridge. The attacker also minted 13.76 m