https://medium.com/@numencyberlabs/the-private-key-of-qanplatform-was-cracked-by-hackers-causing-1-9-million-losses-8673a54fbb20
The Private Key of QANplatform was Cracked by Hackers, Causing $1.9 Million Losses!
On October 11, according to on-chain monitoring, Numen Cyber labs found that the QANplatform cross-chain bridge project was attacked, which was suspected to be caused by the leakage of the private key. It caused approximately $1.9 million losses and the price of QANX also plummeted by 93%. Currently, the trading, deposit and withdrawal functions of CEX have been suspended. The project team said that they had taken a snapshot of the state before the attack, and the liquidity in the Uniswap and Pancakeswap pools was withdrawn. New tokens will be airdropped to users to reduce their losses.
As we all know, the security of wallet private key is also the top priority of asset security. It is recommended that users keep it properly and do not use insecure tools to generate wallet addresses. Next, let’s take a closer look at this attack.
Private key leaks wallet address：
https://bscscan.com/address/0x68e8198d5b3b3639372358542b92eb997c5c314a
Hacker address：
https://etherscan.io/address/0xf163a6cab228085935fa6c088f9fc242afd4fb11
BSC attack transaction：
https://bscscan.com/tx/0xf93047e41433d73ddf983cfa008aeb356ec89803c0a92b0e97ccdc6c42a13f51
ETH attack transaction：
https://etherscan.io/tx/0x048a1a71fd41102c72427cc1d251f4ecbf70558562564306e919f66fd451fe82
Attack Analysis
2. The hacker then continued to use the address 0x68e8198d5b3b3639372358542b92eb997c5c314a to initiate a transaction on ETH, and then called the bridgeWithdraw function of the cross-chain bridge contract BridgeQANX to transfer 1431880339 QANX tokens to the wallet address 0xF163A6cAB228085935Fa6c088f9Fc242AFD4FB11.
3. We analyzed the details of both transactions. The caller of the two attack transactions is the wallet address 0x68e8198d5b3b3639372358542b92eb997c5c314a, and the creator of the cross-chain bridge contract is the same address. Therefore, we believe that this attack may be caused by the leakage of the private key of the project party.
4. At present, the hacker has exchanged the QANX tokens of the BSC chain to BNB and transferred them through Tornado.Cash. There are still 105,277,9073 tokens on the ETH chain currently in the hacker’s address.
Summary
Numen Cyber Labs will continue to pay attention to the capital flow of this attack and the follow-up remedial measures of the project party. It also reminds users and project parties to pay attention to the custody of their wallet private keys and mnemonics, and not to use untrustworthy tools to Generate wallet addresses, as they are the keys to open your wallet and may cause direct loss of your assets.
In collaboration with Meta Akita Inc., and a Heirloom Inc., the Akita Inu Preservation Society has spearheaded the creation of an innovative platform for distributing digital pedigree certificates.
KikyoGlobal regulators, including Thailand's SEC, target deceptive crypto advertisements, implementing stringent guidelines to safeguard investors and deter fraudulent activities.
WeiliangElon Musk's transformation of Twitter into the "everything app" X includes integrating cryptocurrency for seamless financial transactions, but faces regulatory challenges in Australia due to content issues, shaping the future of social media and finance.
WeatherlyNoyb files a complaint against OpenAI for failing to correct inaccurate ChatGPT outputs, questioning the compliance of AI with EU privacy laws.
AlexThai authorities recently raided illegal crypto mining operations in two provinces, seizing devices worth $5 million and arresting three suspects for power theft.
MiyukiAs Tesla's stock price soars due to optimistic news from China, U.S. stock index futures rise slightly. Looking ahead, traders will shift their focus to the Federal Reserve's rate decision, the monthly employment report, and more earnings reports from the "Big Seven" tech giants. Given that the Fed has indicated that it will keep rates high for a longer period, tension is apparent in the cryptocurrency market.
AlexHuaxia, Bosera, and Harvest Bitcoin Spot ETFs have debuted and begun trading on the Hong Kong Stock Exchange.
MiyukiGold and Bitcoin weakened, with significant volatility in USD/JPY, all pointing to actions by the Federal Reserve as the root cause.
WeiliangIn the near future, the Solana Spot ETF, poised to be the inaugural offering of its kind in North America by SOLWealth, is poised to capture significant attention in the cryptocurrency sphere.
CatherineNigeria's EFCC froze over 1,100 crypto traders' accounts due to alleged currency manipulation and money laundering, intensifying concerns about crypto regulation. While the CBN denies a crypto ban, the EFCC's actions and regulatory uncertainties cast a shadow over Nigeria's crypto future.
Weatherly