Hacking of Over 20 Crypto Projects: Damages Exceed $2.7 Million

Over the weekend, hackers attacked more than 20 crypto projects and services, causing damages of at least $2.7 million.

The largest incidents affected Chainalysis, b14g, Troves, and Premia V3. The attackers exploited smart contract vulnerabilities and withdrawal mechanism errors.

Attacks on Infrastructure

• Chainalysis: client names and emails leaked via internal systems
• b14g: $1.47 million in CORE tokens stolen due to logic error
• Troves: $667k BTC stolen via an old smart contract
• Premia V3: $450k stolen using a flash loan
• BTCPay Server: user funds withdrawn from wallets running outdated versions
• Talis Protocol: 5,700 NFTs hijacked for approximately $3,100 profit
• Solana Mobile: phishing app SKR Claim found in dApp Store

Attackers spoofed websites of Flap, Kintsu, Pickle Finance, and other projects via registrar Name.com. Visitors were redirected to malicious pages to sign transactions that stole their funds.