Hack Track

On September 16th, 2024, the decentralized lending platform DeltaPrime fell victim to a devastating hack. The attackers exploited a vulnerability in the protocol's security, resulting in the theft of over $6 million. Surprisingly, this is the 2nd strike on DeltaPrime within 2 months, the first one being on July 23rd this year when $1 million was lost due to a misconfiguration that allowed an attacker to take over accounts, repay loans, and withdraw collateral.

On September 10th, 2024, Indodax, a leading Indonesian cryptocurrency exchange, fell victim to a devastating security breach. This attack resulted in the theft of over $25.47 million worth of cryptocurrencies, highlighting the ongoing vulnerabilities in the cryptocurrency ecosystem.

UwU Lend, a decentralized finance (DeFi) platform, suffered a security exploit on June 10th, resulting in a loss of more than $18.89 million on the Ethereum blockchain. UwU Lend is a platform for cryptocurrency users to earn and borrow digital assets. Unlike traditional banks, it doesn't hold onto your funds (non-custodial). Users can participate as depositors, borrowers, or LP stakers. Depositors provide liquidity to the market to earn a passive income, while borrowers can borrow in an overcollateralized fashion. LP stakers provide liquidity and receive a revenue share when staking their LP tokens.

Pike Finance, a platform designed to simplify borrowing and lending digital assets across different blockchains, fell victim to a series of attacks in April 2024. Pike Finance allowed users to interact with their crypto directly on their native blockchains, eliminating the need for a complex "wrapping" process. This innovative approach aimed to streamline DeFi experiences.

Mixin Network, a Hong Kong-based digital asset transactional platform, reported a security breach on 25 September, revealing a loss of approximately $200 million due to a hack of its cloud service provider. The stolen funds accounted for so far are comprised of ETH, USDT (swapped to DAI), and BTC. If the $200M figure stated by Mixin is accurate, it would make this incident the biggest hack of 2023 so far.

On the 13th of August 2023, at around 10:30 pm UTC, Zunami Protocol suffered a price manipulation attack and lost approximately $2.1 million.

On August 7th, 2023, Steadefi, a sophisticated yield aggregator, fell victim to an assault that resulted in a substantial loss of over $1.14 million.