A cybercriminal responsible for the embezzlement of $7.4 million from Hundred Finance in 2023 has reemerged after a year of inactivity.
On 1 May 2024, the hacker transferred approximately $800,000 worth of Ether and Tether from Curve's decentralised exchange (DEX) after adding liquidity to the platform over a year ago. This signals a potential attempt to launder or utilise the stolen funds.
Following the withdrawal, the hacker exchanged USDT and other cryptocurrencies for ETH, boosting their ETH holdings by over $1 million.
Presently, the hacker maintains assets totaling $4.3 million within the wallet, comprising a diverse range of cryptocurrencies such as Dai, Wrapped Ether, Frax, and Wrapped Bitcoin.
The original hacker leveraged a complex exploit targeting a vulnerability within the Hundred Finance project on the Optimism blockchain.
The hacker manipulated the exchange rate for hWBTC (wrapped Bitcoin) by making a large, temporary donation of 200 WBTC (worth millions) through flash loans.
This inflated hWBTC's value artificially, allowing the attacker to drain significant amounts from Hundred Finance's lending pools using minimal hWBTC.
Security firm Peckshield identified a combination of flash loans, a critical rounding error in the smart contract code, and manipulation of the contract itself as key components of this exploit.
Token transactions carried out by the Hundred Finance hacker. (Source: Etherscan)
The recent movement of stolen assets by the Hundred Finance hacker mirrors a similar pattern observed with the Poloniex exchange hacker.
After months of dormancy, the Poloniex attacker transferred 501 BTC (approximately $32 million) across multiple wallets, presumably to obfuscate the origin of the stolen funds.
This highlights the ongoing struggle for cybercriminals to launder stolen cryptocurrency and convert it to fiat currency without leaving a digital trail.
On 10 November 2023, Poloniex, a cryptocurrency exchange owned by Justin Sun, fell victim to a hack that compromised its hot wallet.
Hackers managed to steal $120 million worth of various cryptocurrencies, including Ethereum, Tron, Bitcoin, XRP, and Shiba Inu. In response, Poloniex suspended withdrawals and assured users that the exchange would cover the losses.
Poloniex launched a full investigation and implemented security measures. This included a comprehensive security audit and a wallet update that would generate new deposit addresses for all users upon service resumption.
Justin Sun, through on-chain messages, directly communicated with the hacker, offering a $10 million white hat bounty for the return of the stolen funds by 25 November 2023. Additionally, Poloniex threatened legal action with the help of authorities from China, Russia, and the United States if the funds weren't returned.
The ability to launder stolen crypto is further hindered by intensifying regulatory scrutiny on services traditionally used for this purpose. Crypto mixers, once offering anonymity for transactions, are increasingly under pressure from law enforcement.
Recent examples include the U.S. Department of Justice charging the founders of Samourai Wallet and Tornado Cash with facilitating money laundering activities.
Additionally, the European Parliament voted to ban crypto mixers entirely as part of new anti-money laundering regulations. These actions significantly complicate efforts by cybercriminals to break the traceability chain linking stolen funds back to their crimes.
Despite the resurgence of the Hundred Finance hacker, there are positive signs emerging within the cryptocurrency space. April 2024 saw a significant decrease in revenue generated from crypto scams and hacking compared to previous periods.
According to blockchain security firm CertiK, these incidents dropped a staggering 141% compared to March, reaching a new low of $25.7 million.
Breaking down the losses, most stemmed from exploits targeting blockchain protocols, totaling $21 million. Malicious actors were also responsible for exit scams and rug pulls, causing users to lose $4.3 million. Flash loan attacks caused minimal damage, contributing only $129,000.
This positive trend is attributed to a combination of factors, including increased regulatory activity, improved security practices within the crypto industry, and heightened user awareness regarding potential scams.
However, the rise of ransomware and darknet market activities suggests a shift in criminal tactics, highlighting the need for continued vigilance.
The recent activity by the Hundred Finance hacker serves as a reminder of the ongoing challenges in securing cryptocurrency platforms and preventing financial crime.
However, the decline in overall crypto scams and hacking offers a glimmer of hope.
As regulations strengthen, security practices improve, and user awareness grows, the cryptocurrency ecosystem may become less susceptible to criminal activity.
Nevertheless, the rise of alternative avenues for illicit gains, such as ransomware, necessitates ongoing efforts to stay ahead of evolving criminal tactics.
After much anticipation and endless speculations, Ethereum Foundation researcher Justin Drake has finally reveal his “Beam Chain”proposal to enhance Ethereum’s consensus layer.
XingChiIn Thailand, armed robbers forced a Ukrainian man to transfer $250,000 in USDT under threat. They restrained him and warned against reporting the crime before fleeing. Thai police soon arrested four suspects, including a regular USDT buyer from the victim.
KikyoA careless cryptocurrency user just lost $25 million after sending Renzo restaked ether tokens to their safe module-a restricted holding account-instead of their safe wallet-a primary wallet that allows full access to funds.
XingChiFour foreign nationals were arrested in Thailand for a robbery on 8 November, where they forced a Ukrainian tourist, Viacheslav Leibov, to transfer 250,000 USD in cryptocurrency. The suspects, who had prior connections to the victim, were charged with armed robbery, unlawful detention, and coercion.
WeatherlyThe Ethereum Foundation launched the Mekong testnet to trial key changes ahead of the Pectra upgrade, focusing on staking workflows and UX improvements. The testnet will help developers and stakers provide feedback before these changes are implemented on Ethereum’s mainnet in early 2025.
WeatherlyBitcoin is outpacing traditional assets like gold due to increasing adoption by individuals and institutions. With political backing and a surge in value, it’s gaining traction as a reliable store of value, alongside stablecoins for everyday transactions.
JoyIndia has recently announced that the country is considering banning cryptocurrencies like Bitcoin and Ether in favor of its Central Bank Digital Currency (CBDC).
XingChiHong Kong authorities are investigating a cryptocurrency scam in which a 26-year-old woman reported losing approximately HK$93,000 ($12,000) in tether (USDT) at an exchange shop in Mong Kok.
XingChiTether is biting back on The Wall Street Journal for speculating that the company is under investigation by the U.S federal government.
XingChiOver $20 million in cryptocurrency, linked to the 2016 Bitfinex hack and stored in a US government wallet, has been suspiciously transferred, raising concerns of a potential theft. Blockchain analysts are investigating the sudden movement, which includes funds like Ethereum and stablecoins, possibly tied to a hacker.
JoyPoloniex announces substantial progress in its restoration endeavours after falling victim to a significant security breach on 10 November.
CatherineTotal losses are still being calculated as of time of writing, with some estimates placing it above $100 million.
DavinLast week, Huobi denied that the two exchanges were planning to merge.
CoindeskAugust 25, 2022, Panama City, Panama - Because the crypto markets move in the blink of an eye, Poloniex, the ...
BitcoinistEthereum, the second cryptocurrency by market cap, is about to enter a new era. In September, Ethereum will complete its ...
BitcoinistAugust 1, 2022, Panama City, Panama - Poloniex, a global cryptocurrency exchange, is thrilled to announce that a new trading ...
Bitcoinist
NulltxPoloniex, a global cryptocurrency exchange that has been on the scene since 2014, collaborated with APENFT to integrate a one-stop ...
BitcoinistPoloniex, a global cryptocurrency exchange that has been on the scene since 2014, collaborated with APENFT to integrate a one-stop ...
BitcoinistPANAMA CITY, May 25, 2022 — Poloniex, a global cryptocurrency exchange, officially announced a strategic partnership with APENFT, a leading ...
Bitcoinist