--- title: Hack Track description: Merkle Science Hack Track provides digestible insights on the movement of stolen funds from the latest cryptocurrency heists. --- # Hack Track ![](https://blog.merklescience.com/hubfs/DeltaPrime%20Hack.png) [Cryptocurrency](https://blog.merklescience.com/hacktrack/tag/cryptocurrency), [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [blockchain](https://blog.merklescience.com/hacktrack/tag/blockchain), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track), [decentralized finance](https://blog.merklescience.com/hacktrack/tag/decentralized-finance) ### [Hack Track: DeltaPrime Flow of Funds Analysis](https://blog.merklescience.com/hacktrack/hack-track-deltaprime-flow-of-funds-analysis) Sep 19, 2024 9:19:48 AM On September 16th, 2024, the decentralized lending platform DeltaPrime fell victim to a devastating hack. The attackers exploited a vulnerability in the protocol's security, resulting in the theft of over $6 million. Surprisingly, this is the 2nd strike on DeltaPrime within 2 months, the first one being on July 23rd this year when $1 million was lost due to a misconfiguration that allowed an attacker to take over accounts, repay loans, and withdraw collateral. [Read More](https://blog.merklescience.com/hacktrack/hack-track-deltaprime-flow-of-funds-analysis) ![](https://blog.merklescience.com/hubfs/WazirX%20Hack%20%281%29.png) [Cryptocurrency](https://blog.merklescience.com/hacktrack/tag/cryptocurrency), [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [blockchain](https://blog.merklescience.com/hacktrack/tag/blockchain), [decentralized finance](https://blog.merklescience.com/hacktrack/tag/decentralized-finance) ### [Hack Track: Indodax Flow of Funds Analysis](https://blog.merklescience.com/hacktrack/hack-track-indodax-flow-of-funds-analysis) Sep 16, 2024 10:30:00 AM On September 10th, 2024, Indodax, a leading Indonesian cryptocurrency exchange, fell victim to a devastating security breach. This attack resulted in the theft of over $25.47 million worth of cryptocurrencies, highlighting the ongoing vulnerabilities in the cryptocurrency ecosystem. [Read More](https://blog.merklescience.com/hacktrack/hack-track-indodax-flow-of-funds-analysis) ![](https://blog.merklescience.com/hubfs/WazirX%20Hack.png) [#News](https://blog.merklescience.com/hacktrack/tag/news), [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [blockchain](https://blog.merklescience.com/hacktrack/tag/blockchain), [Crypto](https://blog.merklescience.com/hacktrack/tag/crypto), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track) ### [Investigating the WazirX Hack and Flow of Funds](https://blog.merklescience.com/hacktrack/wazirx-security-breach-235-million-crypto-theft-raises-concerns) Jul 19, 2024 7:22:56 AM WazirX, a leading Indian cryptocurrency exchange catering primarily to the domestic market, suffered a major security breach on July 18th, 2024. Hackers managed to siphon off more than $234.74 million worth of crypto assets in over 190 different tokens. [Read More](https://blog.merklescience.com/hacktrack/wazirx-security-breach-235-million-crypto-theft-raises-concerns) ![](https://blog.merklescience.com/hubfs/Velocore%20hack%20%281%29.png) [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [blockchain](https://blog.merklescience.com/hacktrack/tag/blockchain), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track), [decentralized finance](https://blog.merklescience.com/hacktrack/tag/decentralized-finance) ### [Investigating the UwU Lend Hack and Flow of Funds](https://blog.merklescience.com/hacktrack/investigating-the-uwu-lend-hack-and-flow-of-funds) Jun 12, 2024 1:16:06 PM UwU Lend, a decentralized finance (DeFi) platform, suffered a security exploit on June 10th, resulting in a loss of more than $18.89 million on the Ethereum blockchain. UwU Lend is a platform for cryptocurrency users to earn and borrow digital assets. Unlike traditional banks, it doesn't hold onto your funds (non-custodial). Users can participate as depositors, borrowers, or LP stakers. Depositors provide liquidity to the market to earn a passive income, while borrowers can borrow in an overcollateralized fashion. LP stakers provide liquidity and receive a revenue share when staking their LP tokens. [Read More](https://blog.merklescience.com/hacktrack/investigating-the-uwu-lend-hack-and-flow-of-funds) ![](https://blog.merklescience.com/hubfs/Velocore%20hack.png) [Cryptocurrency](https://blog.merklescience.com/hacktrack/tag/cryptocurrency), [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [blockchain](https://blog.merklescience.com/hacktrack/tag/blockchain), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track) ### [Investigating the Velocore Hack and Flow of Funds](https://blog.merklescience.com/hacktrack/investigating-the-velocore-hack-and-flow-of-funds) Jun 4, 2024 6:43:00 PM Velocore, a decentralized exchange that operates on the Telos, zkSync Era, and Linea blockchains, was exploited on the 2nd of June, 2024. Hackers targeted vulnerabilities in Velocore's smart contracts that were responsible for managing liquidity pools. [Read More](https://blog.merklescience.com/hacktrack/investigating-the-velocore-hack-and-flow-of-funds) ![](https://blog.merklescience.com/hubfs/Pike%20Fi%20.png) [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [blockchain](https://blog.merklescience.com/hacktrack/tag/blockchain), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track), [decentralized finance](https://blog.merklescience.com/hacktrack/tag/decentralized-finance) ### [Hack Track: Pike Finance Flow of Funds Analysis](https://blog.merklescience.com/hacktrack/hack-track-pike-finance-flow-of-funds-analysis) May 3, 2024 2:12:32 PM Pike Finance, a platform designed to simplify borrowing and lending digital assets across different blockchains, fell victim to a series of attacks in April 2024. Pike Finance allowed users to interact with their crypto directly on their native blockchains, eliminating the need for a complex "wrapping" process. This innovative approach aimed to streamline DeFi experiences. [Read More](https://blog.merklescience.com/hacktrack/hack-track-pike-finance-flow-of-funds-analysis) ![](https://blog.merklescience.com/hubfs/Prisma%20Fi%20.png) [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track) ### [Hack Track: Prisma Finance - Flow of Funds Analysis](https://blog.merklescience.com/hacktrack/hack-track-prisma-finance-flow-of-funds-analysis) Apr 2, 2024 2:55:28 PM On March 28th, [Prisma Finance](https://prismafinance.com/), a decentralized lending platform, experienced a flashloan attack that led to a significant loss of $12.6 million. The attack exploited a vulnerability within the smart contract code, particularly within the "MigrateTroveZap" contracts responsible for migrating user positions between different trove managers. [Read More](https://blog.merklescience.com/hacktrack/hack-track-prisma-finance-flow-of-funds-analysis) ![](https://blog.merklescience.com/hubfs/Address%20Poisoning%20%20%281%29.png) [#News](https://blog.merklescience.com/hacktrack/tag/news), [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [Crypto](https://blog.merklescience.com/hacktrack/tag/crypto), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track) ### [Hack Track: CurioDAO Flow of Funds Analysis](https://blog.merklescience.com/hacktrack/hack-track-curiodao-flow-of-funds-analysis) Mar 27, 2024 7:28:37 AM CurioDAO is a multichain platform focused on real-world asset tokenization, enhancing liquidity through various mechanisms such as stablecoins, a launchpad, and Automated Market Makers. The platform is governed by the Curio Governance Token (CGT), allowing holders to participate in decision-making processes related to the Curio Creator Protocol. On the 23rd of March 2024, a vulnerability in the voting power privilege access control was exploited, leading to a significant security breach. The attacker gained access to Curio Governance (CGT) tokens, allowing them to increase their voting power within the project's smart contract. With this elevated voting power, the attackers were able to execute the unauthorized minting of a large quantity of CGT tokens.  [Read More](https://blog.merklescience.com/hacktrack/hack-track-curiodao-flow-of-funds-analysis) ![](https://blog.merklescience.com/hubfs/Onyx%20Hack.png) [#News](https://blog.merklescience.com/hacktrack/tag/news), [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track) ### [Onyx Protocol Hack: Flow of Funds Analysis](https://blog.merklescience.com/hacktrack/onyx-protocol-hack-flow-of-funds-analysis) Nov 7, 2023 1:54:15 PM On November 1st, Onyx Protocol encountered a substantial security breach, leading to a loss of approximately $2.1 million. To carry out the attack, the hackers adeptly leveraged a well-documented rounding-off discrepancy inherent to the widely used CompoundV2 fork. [Read More](https://blog.merklescience.com/hacktrack/onyx-protocol-hack-flow-of-funds-analysis) ![](https://blog.merklescience.com/hubfs/Hamas%20Banner%20%281%29.png) [#News](https://blog.merklescience.com/hacktrack/tag/news), [cryptocrime](https://blog.merklescience.com/hacktrack/tag/cryptocrime), [blockchain](https://blog.merklescience.com/hacktrack/tag/blockchain), [Crypto](https://blog.merklescience.com/hacktrack/tag/crypto), [Hack Track](https://blog.merklescience.com/hacktrack/tag/hack-track) ### [LastPass Hack: Flow of Funds Analysis](https://blog.merklescience.com/hacktrack/lastpass-hack-flow-of-funds-analysis) Nov 6, 2023 11:38:04 AM On October 25th, 2023, LastPass, a widely used password manager, fell victim to a security breach. The breach had significant ramifications, affecting approximately 25 users whose assets were distributed across 80 wallets. This breach resulted in a staggering loss of approximately $4.4 million in various cryptocurrencies. Among the affected blockchain networks were Bitcoin, Ethereum, Binance Smart Chain, Polygon, Solana, Cardano, Litecoin, Arbitrum, and Avalanche.  [Read More](https://blog.merklescience.com/hacktrack/lastpass-hack-flow-of-funds-analysis)