PeckShield Inc.

A blockchain security and data analytics company (telegram:

[PeckShield Inc. @peckshield]

1/ We are thrilled to announce a self-service SaaS platform-#KillSwitch, which aims to detect exploitation TXs before their block inclusion and take contingency measures to block the attack or prevent assets from being stolen. It is in-essence a frontrunning-based DeFi protection

[PeckShield Inc. @peckshield]

It seems @bitget hot wallet potentially hacked w/ >$178m @BitgetSupport https://t.co/iefRifYanv

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert @TectonicFi was exploited for ~$74M total on the @CronosNetwork. In response, Cronos paused the entire chain.

The attacker managed to bridge out only ~$6M to #Ethereum before the pause, leaving the remaining ~$60M stuck on Cronos.

The attacker's funds are now sitting across the following addresses:
~$60M on Cronos: 0x7d4e....4f2dc
~$6M bridged to Ethereum: 0xc404...72dd
~$8M on Cronos: 0x215a...d3fc

[PeckShield Inc. @peckshield]

@TheBlockCo https://t.co/LmIm2Bv452

[PeckShieldAlert @PeckShieldAlert]

Update: This is NOT an attack. The fund movement was part of normal operational rebalancing. No user funds at risk.

[PeckShield Inc. @peckshield]

Looks like the @summerfinance_ LazyVault_LowerRisk_USDC vault has a share price accounting issue that may be manipulated by donating to SiloManagedVault

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert @summerfinance_ has been exploited for $6M ethereum:0x6b175474e89094c44da98b954eedeac495271d0f

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert @summerfinance_ has been exploited for $6M ethereum:0x6b175474e89094c44da98b954eedeac495271d0f

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert Specter reported that @Raydium has been drained of $1.3M worth of crypto

The attacker was initially funded from #KuCoin, bridged the stolen funds from #Solana to ETH, and deposited 810 $ETH to #TornadoCash and 7 ETH to #FixedFloat.

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert The @gravity_bridge has been drained of ~$5.4M, including $4.3M $USDC, 274 $ETH (~$553K), $434K $USDT & 14.164 $PAYG ($64K)

The hacker has laundered a portion of the stolen assets through #ChangeNow & #Binance, and is still holding 2.102K $ETH (~$4.23M).

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert $USDR & $EURR have depegged (-20%) @StablREuro

[PeckShield Inc. @peckshield]

Hi @mapprotocol, you may want to take a look: huge amount 1,000,000,000,000,000 of $MAP0 were minted:

https://t.co/gTl5TGRC9a

[PeckShield Inc. @peckshield]

Hi @veruscoin It seems abnormal assets outflow (~$11.4m) from Verus-Ethereum Bridge: https://t.co/2Ol7cngtjY

The funds are currently parked in the following address: https://t.co/YaMyk4ffZH

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert @THORChain has been exploited for ~$10M worth of crypto, including 36.75 $BTC ($3M) and ~$7M worth of assets from #BNBChain, #Ethereum, and #Base.

The stolen funds mainly sit in:
bc1ql4u94klk265lnfur2ujk9p6uh52f2a8jhf6f37
0xd477b69551f49C0519F9B18c55030676138890Bd

[PeckShield Inc. @peckshield]

After liquidating the KelpDAO exploiter's aave position, previously-affected ethereum:0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2 core market on Ethereum now has available liquidity of ~$177m !
https://t.co/UGAMGSzv7h

[PeckShieldAlert @PeckShieldAlert]

It seems the 0x1f4c_Kelp DAO Exploiter on ethereum is being liquidated (w/ ~$123m debt) in @aave

Here is the related tx:
https://t.co/MIiEafxSWI

The arbitrum position is also liquidated:
https://t.co/oACQ4OFku4

[PeckShield Inc. @peckshield]

It seems the admin key of @wasabi_protocol has been compromised with the estimated loss of $5.5m across multiple chains, including ETH, BASE, BLAST, and BERA chains.

Here is the related tx to add the malicious admin:
https://t.co/e4scPX1VQg

[Wasabi Protocol 🟢 @wasabi_protocol]

We're aware of an issue and are actively investigating.

As a precaution, please do not interact with Wasabi contracts until further notice.

We'll share an update as soon as we have more information. Thanks for your patience.

[PeckShieldAlert @PeckShieldAlert]

#PeckShieldAlert @syndicateio reported a compromise of the Commons bridge. $SYND has dropped -35%.

[PeckShield Inc. @peckshield]

@androolloyd @banteg

[PeckShield Inc. @peckshield]

@scupytrooples

[PeckShield Inc. @peckshield]

@cryptobyrde The victim trusted a buggy contract (to manage its position in Alchemix Yearn yvVault - $yvWETH), which was exploited to redeem the position to steal underlying ETH.

[PeckShield Inc. @peckshield]

A victim just lost a Alchemix Yearn yvVault position $yvWETH (estimated $~1m), from an earlier approval to an unverified contract (https://t.co/7FZN41E15u). This unverified contract, created 10 days ago, turns out to be buggy and can be exploited for arbitrary call execution.

Here is the vulnerable logic from the decompiled contract, affected in the following exploit tx: https://t.co/do8GDbTmKa