Ankr post-mortem report: The attack originated from a malicious supply chain attack by a former member, and is cooperating with law enforcement to prosecute

Web3 infrastructure provider Ankr has released a postmortem report revealing the findings of its investigation into the exploitation of the aBNBc token. Ankr said that the attack stemmed from a malicious supply chain attack by a former team member, inserting a malicious code package that could destroy the private key once a legitimate update was made. We are currently working with law enforcement to prosecute the former team member to bring him to justice. While this may impact any protocols, the team is supporting internal HR processes and security measures to strengthen the security posture going forward. Next, Ankr is making several improvements to its security posture, including requiring multi-signature authentication and timelocks for all updates, improving internal security measures, implementing a new monitoring and notification system, and refining the process of using DeFi protocols.