OneKey reproduces transaction replacement attack on outdated Ledger Ethereum app
Related
No, Ledger Wasn’t Hacked: Vulnerable Ethereum App Was Patched Before Exploit, Company Says
OneKey demonstrated how an outdated Ethereum app could sign a transaction different from the one shown on a Ledger device, but the wallet maker says the vulnerability had already been fixed.
StanChart, HSBC execute first live transaction on Swift blockchain ledger
The transaction connected the banks’ separate tokenized deposit systems through Swift’s ledger, marking a step toward interoperable, 24/7 cross-border payments.
Hinkal's privacy protocol has suspended affected smart contracts due to abnormal USDC transactions on the Ethereum blockchain.
Odaily Odaily reports that decentralized privacy protocol Hinkal Protocol has announced it has noticed unusual activity involving USDC on the Ethereum network within its system. Currently, this only affects the Ethereum blockchain; other chains are unaffected. As a precaution, affected smart contracts have been suspended, and a comprehensive investigation and analysis of related on-chain transactions and activities is underway. The investigation is ongoing, and updates will be released as information becomes available. Previously, it was reported that Hinkal suffered a loss of $800,000 due to a suspicious USDC transaction.
The Ethereum blockchain project BackedFi suffered a suspicious attack, resulting in a loss of approximately $204,200.
PANews reported on July 1 that, according to TenArmorAlert monitoring, the Ethereum blockchain project BackedFi suffered a suspicious attack, resulting in a loss of approximately $204,200.
hinkal will fully compensate users for their funds, confirming that approximately 797,000 USDC was withdrawn by attackers and exchanged for 454 ETH.
Mars Finance reports that the decentralized privacy protocol hinkal has released a security incident update, confirming that attackers withdrew approximately 797,000 USDC from its Ethereum contracts through a series of transactions and exchanged it for approximately 454 ETH. Of this, approximately 410 ETH was subsequently transferred to Tornado Cash, and the remaining approximately 44.67 ETH was transferred to the Bitcoin network via THORChain. The company is currently working with external security teams to track the flow of funds. hinkal stated that the impact of this security incident is limited to the relevant on-chain liquidity pools; other on-chain contracts were unaffected, but all contracts have been temporarily suspended for repairs and security verification. All affected users will receive full compensation on a 1:1 basis; the specific compensation process and timeline will be announced in a subsequent update.
IN's price plummeted by 43.6% in the last 24 hours. The INFINIT team stated that neither the platform nor the token was attacked.
PANews reported on July 1st that INFINIT responded to the recent abnormal price fluctuations of its IN token, stating that the platform and tokens were not compromised or attacked, and all funds are safe. The project team discovered that a wallet transferred tokens from Bitget and Gate to a cross-chain address, then used LayerZero to cross-chain from Ethereum to BNB Chain. Approximately 9 million tokens were destroyed on the Ethereum side, and an equivalent amount was minted on the BNB Chain side three minutes later. Subsequently, the wallet conducted multiple sell transactions on Pancakeswap. INFINIT stated that this is a market integrity issue rather than a platform security issue, and the team has cooperated with the relevant exchanges to investigate and hold those responsible accountable. Coingecko data shows that the IN token price has fallen by 43.6% in the past 24 hours, currently trading at $0.06669.