A cybercriminal responsible for the embezzlement of $7.4 million from Hundred Finance in 2023 has reemerged after a year of inactivity.
On 1 May 2024, the hacker transferred approximately $800,000 worth of Ether and Tether from Curve's decentralised exchange (DEX) after adding liquidity to the platform over a year ago. This signals a potential attempt to launder or utilise the stolen funds.
Following the withdrawal, the hacker exchanged USDT and other cryptocurrencies for ETH, boosting their ETH holdings by over $1 million.
Presently, the hacker maintains assets totaling $4.3 million within the wallet, comprising a diverse range of cryptocurrencies such as Dai, Wrapped Ether, Frax, and Wrapped Bitcoin.
The original hacker leveraged a complex exploit targeting a vulnerability within the Hundred Finance project on the Optimism blockchain.
The hacker manipulated the exchange rate for hWBTC (wrapped Bitcoin) by making a large, temporary donation of 200 WBTC (worth millions) through flash loans.
This inflated hWBTC's value artificially, allowing the attacker to drain significant amounts from Hundred Finance's lending pools using minimal hWBTC.
Security firm Peckshield identified a combination of flash loans, a critical rounding error in the smart contract code, and manipulation of the contract itself as key components of this exploit.
Token transactions carried out by the Hundred Finance hacker. (Source: Etherscan)
The recent movement of stolen assets by the Hundred Finance hacker mirrors a similar pattern observed with the Poloniex exchange hacker.
After months of dormancy, the Poloniex attacker transferred 501 BTC (approximately $32 million) across multiple wallets, presumably to obfuscate the origin of the stolen funds.
This highlights the ongoing struggle for cybercriminals to launder stolen cryptocurrency and convert it to fiat currency without leaving a digital trail.
On 10 November 2023, Poloniex, a cryptocurrency exchange owned by Justin Sun, fell victim to a hack that compromised its hot wallet.
Hackers managed to steal $120 million worth of various cryptocurrencies, including Ethereum, Tron, Bitcoin, XRP, and Shiba Inu. In response, Poloniex suspended withdrawals and assured users that the exchange would cover the losses.
Poloniex launched a full investigation and implemented security measures. This included a comprehensive security audit and a wallet update that would generate new deposit addresses for all users upon service resumption.
Justin Sun, through on-chain messages, directly communicated with the hacker, offering a $10 million white hat bounty for the return of the stolen funds by 25 November 2023. Additionally, Poloniex threatened legal action with the help of authorities from China, Russia, and the United States if the funds weren't returned.
The ability to launder stolen crypto is further hindered by intensifying regulatory scrutiny on services traditionally used for this purpose. Crypto mixers, once offering anonymity for transactions, are increasingly under pressure from law enforcement.
Recent examples include the U.S. Department of Justice charging the founders of Samourai Wallet and Tornado Cash with facilitating money laundering activities.
Additionally, the European Parliament voted to ban crypto mixers entirely as part of new anti-money laundering regulations. These actions significantly complicate efforts by cybercriminals to break the traceability chain linking stolen funds back to their crimes.
Despite the resurgence of the Hundred Finance hacker, there are positive signs emerging within the cryptocurrency space. April 2024 saw a significant decrease in revenue generated from crypto scams and hacking compared to previous periods.
According to blockchain security firm CertiK, these incidents dropped a staggering 141% compared to March, reaching a new low of $25.7 million.
Breaking down the losses, most stemmed from exploits targeting blockchain protocols, totaling $21 million. Malicious actors were also responsible for exit scams and rug pulls, causing users to lose $4.3 million. Flash loan attacks caused minimal damage, contributing only $129,000.
This positive trend is attributed to a combination of factors, including increased regulatory activity, improved security practices within the crypto industry, and heightened user awareness regarding potential scams.
However, the rise of ransomware and darknet market activities suggests a shift in criminal tactics, highlighting the need for continued vigilance.
The recent activity by the Hundred Finance hacker serves as a reminder of the ongoing challenges in securing cryptocurrency platforms and preventing financial crime.
However, the decline in overall crypto scams and hacking offers a glimmer of hope.
As regulations strengthen, security practices improve, and user awareness grows, the cryptocurrency ecosystem may become less susceptible to criminal activity.
Nevertheless, the rise of alternative avenues for illicit gains, such as ransomware, necessitates ongoing efforts to stay ahead of evolving criminal tactics.
Cryptocurrency market bounce aligns with stablecoin market cap growth, signaling increased industry inflows. Recent plateau suggests stagnant sentiment. Future stablecoin trends may offer insights into broader market direction.
Huang BoThe emergence of crypto has brought about significant changes across multiple industries, including gambling. But with perks like anonymity, faster transactions, and the likes, will crypto trading become a gambling addiction instead?
KikyoPoloniex hack: Attacker moves $53.5 million ETH through Tornado Cash. Funds remain untraceable. TRON founder pledges compensation. Recovery efforts ongoing amid challenges.
Xu LinRipple's CEO predicts US government scrutiny on Tether, sparking a clash between the two companies amidst Ripple's own stablecoin launch.
WeatherlyAnalysts warn of challenges for Ethereum if SEC rejects spot ETH ETFs by May-end. Focus on upcoming decisions for VanEck and Hashdex ETFs. Concerns over ETHBTC ratio decline post-rejection. Inflationary worries persist amid Dencun upgrade. Competition from Solana noted. Uncertain impact on BTC and SOL markets.
EdmundRipple CEO Brad Garlinghouse warns of potential consequences as the U.S. government focuses on Tether, fearing another crypto black swan event. Regulatory scrutiny on Tether raises uncertainty in the crypto market, while Ripple plans its own stablecoin launch. Tether faces ongoing investigations amid concerns over reserve transparency.
Huang BoBesides raising red flags on the stability of the stablecoin market, Deutsche Bank's research analysts expressed particular concern about Tether's prominent position in the stablecoin market, highlighting issues such as speculation and a perceived lack of transparency.
KikyoEthereum's DenCun upgrade leads to inflationary trend, challenging its previous deflationary narrative. Decreased burning rate and increased supply post-upgrade indicate shifting economic dynamics, prompting reassessment of Ethereum's role as "Ultrasound money."
Huang BoEthereum whale profits from year-long investment, making strategic moves amid market fluctuations, capitalizing on short-term gains.
Xu LinSEC delays verdict on Galaxy Invesco's Ethereum ETF proposal, affecting other applicants. Analysts split on approval chances.
Huang BoFor the coins that you actively buy and are optimistic about, as long as the team does not have major problems, ignore the small profits and cash them out in the middle and late stages of the bull market.
JinseFinanceAt the beginning of 2024, nearly a hundred Bitcoin Layer 2 projects appeared, 90% of which were led by Chinese.
JinseFinanceBTC, Layer 2, Hundreds of Schools of Thought: An inventory of 30+ BTC L2 projects. Golden Finance has 30+ listed projects and more than 60 more on the way.
JinseFinanceSo if the Bitcoin spot ETF lands in January and Bitcoin rises, Ethereum may make up for the gains a bit. For Ethereum to really rise sharply, it needs its own ecology to have hot-selling projects and popular tracks, so that it can uniquely lead the rise.
JinseFinanceFrax Finance: Stablecoin hedging inflation, supporting a stable digital currency ecosystem.
Cheng Yuan
Coinlive Yet another DeFi exploit happened in the scene, and this time, the loss was over a hundred million dollars!
TristanDecentralized finance is a revolutionary movement with aims to cut intermediaries and the expensive taxes that comes with making transactions. ...
BitcoinistThe Decentralised Exchange (DEX) is the most secure way of trading or investing in cryptocurrencies. Being completely decentralised, you have ...
BitcoinistAgave and Hundred Finance have suspended operations while the investigation into the breach continues.
Cointelegraph