The heist was short-lived, though, as the funds were snatched back hours later.
This sequel to the Super Sushi Samurai's $4.8M snafu marks another #oopsie in @Blast_L2 's infancy, a blockchain that hoarded ~$1.24B in TVL since inception.
> Speculation tied the attacker to the North Korean Lazarus group, though unconfirmed. Discussions on rolling back the @Blast_L2 chain to reverse the theft raised decentralization concerns but were ultimately unnecessary as the funds were recovered.
> After being exposed by @zachxbt , the developer returned the funds, totaling about $60.5M, without conditions. This recovery was secured in a multisig wallet by @Blast_L2 core contributors, with notable assistance from @ZachXBT and @samczsun.
> A rogue developer exploited the hashtag @_munchables_ project, by manipulating an upgradeable proxy contract to assign themselves 1,000,000 #ETH. The scheme allegedly involved altering contract storage and hiring developers under false identities to obscure their tracks.
Munch… 🍪
In an almost cinematic twist, a hacker turned @Munchables, a @Blast_L2 project, into their personal ATM, swiping a chill ~$62.5M 💸
But how did it happen?
No spring break for @curio_invest 😞
Curio got hit with a $16 million 💸 sneeze thanks to a leaky smart contract on hashtag #Ethereum 4 days ago.
See a breakdown of asset movements here:
https://t.co/EfJl799oK2
>This exploit wasn't just about creating new tokens and altering governance though; it involved intricate financial maneuvers, including token swaps and cross-chain transfers, aiming to disperse and conceal the origin of the fraudulently minted tokens.
BREAKING‼️ Cryptocurrency exchange Kucoin and two of its founders criminally charged with bank secrecy act violations and unlicensed money transmission offences.
Also, a huge shout out to our Ecosystem Apps for believing in our vision and integrating with Talent Protocol to access rich reputation data from hundreds of thousands of Talent Passports.