4 ms·

Someone stole $120M in crypto by hacking a DeFi website

• theduder99 5y ago
  On Wednesday night, someone drained funds from multiple cryptocurrency wallets connected to the decentralized finance platform BadgerDAO. According to the blockchain security and data analytics Peckshield, which is working with Badger to investigate the heist, the various tokens stolen in the attack are worth about $120 million. While the investigation is still ongoing, members of the Badger team have told users that they believe the issue came from someone inserting a malicious script in the UI of their website. For any users who interacted with the site when the script was active, it would intercept Web3 transactions and insert a request to transfer the victim’s tokens to the attacker’s chosen address.
• stouset 5y ago
  > While the attack didn’t reveal specific flaws within Blockchain tech itself, it managed to exploit the older “web 2.0” technology that most users need to use to perform transactions. What a disgusting attempt to deflect blame. Somehow neither my bank nor my brokerage—which rely entirely on this apparently antiquated web 2.0 stack—have never had this kind of problem, yet billions disappear from these web 3.0 companies’ vaults annually.