By our projection, in the near future, we will observe scams happening every day but with De.Fi you can catch this very early on and protect yourself and your investments better than before.<\/p>\n
Soon we will publish our yearly report on scams and exploits in 2021. We also included there a short cheat sheet on how to ensure your safety in DeFi.<\/p>\n
But now, let\u2019s dive into the TOP-7 cases in January!<\/strong><\/p>\n A bug has been exploited to purchase NFTs from users of OpenSea, at well below market value.<\/p>\n At least five attackers were detected who used this loophole to acquire at least twelve NFTs for far less than their market worth. Bored Ape Yacht Club, Mutant Ape Yacht Club, Cool Cats, and Cyberkongz NFTs are among them.<\/p>\n For example, at around 7 am on January 24, a Bored Ape Yacht Club NFT #9991 was purchased for 0.77 ETH ($1,800). This family of NFTs currently sells for at least $198,000. Twenty minutes later the hacker sold the NFT for 84.2 ETH ($196,000) \u2014 realizing a profit of $194,000.<\/p>\n One attacker, going by the pseudonym \u201cjpegdegenlove\u201d paid a total of $133,000 for seven NFTs \u2014 before quickly selling them on for $934,000 in ether. Five hours later this ether was sent through Tornado Cash, a \u201cmixing\u201d service that is used to prevent blockchain tracing of funds.<\/p>\n Victims were partially compensated.<\/p>\n Read more in the REKT Database \u2192<\/a><\/p>\n On Jan 18, Multichain urged users to remove approvals for six cross-chain tokens (WETH, PERI, OMT, WBNB, MATIC, AVAX), while the users haven\u2019t revoked WETH approval were exploited (WETH 602.69 total affected).<\/p>\n The whitehat hacker returned 259 ETH at:<\/p>\n https:\/\/etherscan.io\/tx\/0x2bbd6a6a0d4d56db0b231465f56c5fca9d11e874109277a576b69f2acf1ee7a9<\/a><\/p>\n Read more in the REKT Database \u2192<\/a><\/p>\n Solfire executed rug pull<\/a> by withdrawing assets from the Solfire hot wallet.<\/p>\n The list of stolen funds:<\/p>\n Initial gas funding was performed through the following wallet and then funds were bridged to Solana:<\/p>\n https:\/\/etherscan.io\/address\/0xe8032c0270164819bbee809324e09d899cc97f18<\/a><\/p>\n Stolen funds have arrived in the next wallets:<\/p>\n https:\/\/etherscan.io\/address\/0xc5afc6c1d4002dc9bc765542a17bb0fc49044ec5<\/a><\/p>\n https:\/\/etherscan.io\/address\/0x1e669254badd2866b217983d6a2fcbbf07d66ff7<\/a><\/p>\n Part of stolen funds was deposited into Curve pool:<\/p>\n https:\/\/etherscan.io\/tx\/0x6719f05a0c62fa06f513b56fb9276b7b7ac38253960ac5d692c3476bfcadf292<\/a><\/p>\n FIRE tokens circulation supply was sent to this address:<\/p>\n https:\/\/solscan.io\/account\/3SfihoLDctTc7fna3akRMkVuSFrhBkCzVv6scBJnjQSF#splTransfers<\/a><\/p>\n The liquidity from the pair was removed.<\/p>\n Read more in the REKT Database \u2192<\/a><\/p>\n The rug pull flow:<\/p>\n https:\/\/bscscan.com\/tx\/0x4707d30a8d8152eebad1cdcae1d93af24cb9a344b447412ee1d65638b5c3db6f<\/a><\/p>\n https:\/\/bscscan.com\/tx\/0xfbba507c8e90a264d5e77e5db854f5697572da1681f3647d4fa4381f7ef825b9<\/a><\/p>\n https:\/\/etherscan.io\/address\/0xdc85c1eb22b0ece7be559a83fd788fe57f5a7a9f<\/a><\/p>\n Read more in the REKT Database \u2192<\/a><\/p>\n On 10 January 2022 at approximately 2:32 PM (UTC +2), hackers managed to gain access to Lympo\u2019s operational hot wallet and stole a total of approximately 165.2 million LMT from it.<\/p>\n Hackers distributed tokens to several external addresses which then sold them on different DEXs.<\/p>\n Read more in the REKT Database \u2192<\/a><\/p>\n On Monday, 17 January 2022 at approximately 12:46 AM UTC Crypto.com\u2019s risk monitoring systems detected unauthorized activity on a small number of user accounts where transactions were being approved without the 2FA authentication control being inputted by the user. This triggered an immediate response from multiple teams to assess the impact.<\/p>\n All withdrawals on the platform were suspended for the duration of the investigation. Any accounts found to be impacted were fully restored. Crypto.com revoked all customer 2FA tokens and added additional security hardening measures, which required all customers to re-login and set up their 2FA token to ensure only authorized activity would occur.<\/p>\n The hacker stole:<\/p>\n Stolen funds were deposited into the Tornado Cash mixer.<\/p>\n Read more in the REKT Database \u2192<\/a><\/p>\n The attacker:<\/p>\n The attacker called the QBridge deposit function on the Ethereum network, which calls the deposit function QBridgeHandler. QBridgeHandler should receive the WETH token, which is the original tokenAddress, and if the person who performed the tx does not have a WETH token, the transfer should not occur.<\/p>\n In summary, the deposit function was a function that should not be used after depositETH was newly developed, but it remained in the contract.<\/p>\n Read more in the REKT Database \u2192<\/a><\/p>\n As always, stay safe and DYOR!<\/p>\n If you\u2019ve been a victim of one of the explained or other scams \u2014 share your story and tag us on Twitter<\/a>. We will investigate the case and extend our database with your REKT story.<\/p>\n For more De.Fi updates you can visit us at Website https:\/\/de.fi\/<\/a> \ud83d\udcf1 Telegram https:\/\/t.me\/DeDotFi<\/a> \ud83d\udc26Twitter https:\/\/twitter.com\/DeDotFi<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" These days a number of people have found themselves falling victim to scams, hacks and pretty much learning that REKT events happen almost every day! Our REKT Database now contains 2,683 scams explained by our Solidity engineers. 14 REKT cases happened in January which equals more than $130M funds lost. By our projection, in the […]<\/p>\n","protected":false},"author":3,"featured_media":1649,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[6,16,5,7],"class_list":["post-1648","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defi","tag-blockchain","tag-crypto-scam-reports","tag-cryptocurrency","tag-defi"],"acf":[],"yoast_head":"\n![\"\"](\"https:\/\/de.fi\/blog\/wp-content\/uploads\/2023\/06\/1NOai_N-BPbDxg2v_sD8nkQ.png\")
<\/p>\n7. Opensea Case \u2014 $1M Lost (Exploit, DeFi)<\/h2>\n
6. Multichain Case \u2014$2.7M Lost (Exploit, DeFi)<\/h2>\n
5. Solfire Case \u2014 $4M Lost (Exit scam, DeFi)<\/h2>\n
\n
4. Arbix Finance Case \u2014 $10M Lost (Exit scam, DeFi)<\/h2>\n
\n
\n
\n
3. Lympo Case \u2014$18M Lost (Access control, DeFi)<\/h2>\n
2. Crypto.com Case \u2014$34M Lost (Access control, CeFi)<\/h2>\n
\n
1. Qubit Case \u2014 $80M Lost (Exploit, DeFi)<\/h2>\n
\n