Bankroll Network DeFi Hacked
DeFi Exploits: Bankroll Drained of $230,000
On September 22, the decentralized finance (DeFi) protocol Bankroll Network suffered a significant hack, losing $230,000. Blockchain security platform TenArmor identified the breach and posted detailed transaction data. The attack involved multiple transfers of BNB (Binance Coin) from a BankrollNetworkStack contract to various addresses, with each transfer valued at $9,679,645.51.
Two distinct transactions stood out. In one, $9,435,877.94 was moved from a PancakeSwap exchange pool to an account ending in “47D7.” This same amount was then transferred back to the BankrollNetworkStack contract. The net difference, approximately $243,767.57, aligns closely with the reported loss amount.
The attacker likely exploited a vulnerability within the protocol, potentially using flash loans to manipulate the system and withdraw more than was deposited initially. Blockchain data confirms these transactions occurred at 4:50 pm UTC on September 22. Despite reaching out, Cointelegraph received no comment from the Bankroll Network team.
DeFi users must be vigilant and conduct thorough research on a protocol’s security measures. Audits by reputable firms can provide some assurance, though no system is entirely foolproof.
Phisher Moves $250,000 Through CoW
On August 28, a phishing attacker who previously stole $55.4 million from a crypto whale attempted to launder $250,000 through the CoW decentralized finance protocol. Blockchain security firm PeckShield detected the activity, noting the attacker converted stolen DAI stablecoin into ETH. This transaction was identified on September 14 when the attacker moved ETH to a new address.
Etherscan data revealed that the attacker executed 33 individual trades as part of a “MoooZ1089603480” function call. The account “Fake_Phishing442897” sent $260,000 worth of DAI to CoW, receiving approximately 106.29 ETH in return.
The attacker employed a third-party paymaster account to obscure the transaction trail, although this attempt at deception failed. The funds can ultimately be traced back to a $55.4-million phishing incident against a large cryptocurrency holder.
Phishing attacks involve tricking victims into authorizing token transfers, leading to drained wallets. Crypto users must scrutinize every transaction and address they interact with. Security firms continue to track these stolen funds, offering a glimmer of hope for potential recovery.
D-Link Discloses Telnet Vulnerabilities
On September 16, networking device manufacturer D-Link revealed five vulnerabilities in its router models, posing risks to home networks and potentially compromising devices holding crypto wallets. Cybersecurity firm CyberRisk Alliance reported these vulnerabilities, which could allow attackers to breach routers and execute arbitrary code.
Two vulnerabilities, CVE-2024-45695 and CVE-2024-45694, involve stack-based overflows, affecting the DIR-X4860 and DIR-X5460 models. Three other vulnerabilities impact the DIR-X4860 and the discontinued COVR-X1870 models, allowing hardcoded credentials to log in if Telnet is enabled.
The most severe vulnerability, CVE-2024-45697, enables an attacker to activate Telnet by connecting the internet port to the modem, granting access to execute OS commands. Other vulnerabilities allow attackers to force-enable Telnet or bypass user input validation.
D-Link urges users to update their firmware to mitigate these risks. Crypto wallet users must ensure their home network is secure, as breaches can lead to the loss of funds through targeted attacks.
Conclusion
The cryptocurrency landscape is fraught with security challenges, from DeFi exploits to phishing attacks and network vulnerabilities. Users must remain vigilant, perform due diligence, and keep their systems updated to safeguard their assets. As the crypto market evolves, so too do the tactics of malicious actors, making continuous security a priority for all participants.
