# Exploit Articoli collegati

Il Centro Notizie HTX fornisce gli articoli più recenti e le analisi più approfondite su "Exploit", coprendo tendenze di mercato, aggiornamenti sui progetti, sviluppi tecnologici e politiche normative nel settore crypto.

Osmosis' allBTC Token Loses 36% of Its Collateral Due to Nomic Attack

The allBTC token on the Osmosis DEX has lost 36% of its backing due to an exploit on the Nomic blockchain. The attacker exploited a bug in Nomic's custom forwarding mechanism to double-spend nBTC, sending fraudulent nBTC vouchers to Osmosis. This created 39.84 nBTC of unbacked value within the allBTC pool, which combines various tokenized versions of Bitcoin. The attacker exchanged most of these fraudulent tokens for other assets (like WBTC and USDC), bridged them to Ethereum, converted them to ETH, and laundered approximately 671 ETH through Tornado Cash, stealing roughly 18 BTC worth of assets. The remaining 22.65 nBTC were converted to allBTC and held on Osmosis. In response, the Nomic chain and the allBTC pool were halted. An emergency update allowed the freezing of the attacker's remaining 22.65 BTC (in allBTC) on Osmosis. Developers plan a governance vote to seize these frozen funds and use community treasury funds to cover the remaining deficit, aiming to fully restore allBTC's collateral.

cryptonews.ru15 h fa

Osmosis' allBTC Token Loses 36% of Its Collateral Due to Nomic Attack

cryptonews.ru15 h fa

Liquid Attacker Keeps $47 Million for Themselves: Is It a White Hat Bounty or Disguised Extortion?

On September 6th, an attacker exploited a vulnerability in the Elements software, the foundation of Blockstream's Liquid Network, to generate approximately 4,000 fake LBTC tokens. Using the normal withdrawal channels of the SideSwap service, they exchanged these for roughly 3,998.5 real BTC (worth about $320 million) from Liquid's multi-signature wallet. The attacker then left a message in a Bitcoin transaction claiming to be "whitehats" and requested on-chain contact. After Blockstream patched the vulnerability upon contact, the attacker returned 3,400 BTC but kept approximately 598.5 BTC (worth around $47 million) in an address under their control. Blockstream is currently in communication to recover these remaining funds and has not officially recognized them as a bug bounty payment. This incident has sparked debate within the crypto community. Supporters argue the attacker acted as a white hat by exposing a critical flaw, securing the fix, and returning most funds, thus preventing a total loss. Some suggest a 15% retention could set a precedent for incentivizing ethical disclosures in major hacks. Critics, however, contend that exploiting the bug first to extract funds and then unilaterally deciding on a reward resembles extortion rather than standard white-hat procedure, where vulnerabilities are typically reported first for a negotiated bounty. Blockstream's ongoing recovery efforts indicate they view the withheld sum as assets to be retrieved, not an agreed-upon bounty.

marsbitIeri 03:01

Liquid Attacker Keeps $47 Million for Themselves: Is It a White Hat Bounty or Disguised Extortion?

marsbitIeri 03:01

Cronos Confirms: $9.2 Million Withdrawn from the Network Before Rollback After Tectonic Exploit

The Cronos Layer 1 blockchain confirmed that $9.19 million was withdrawn from its network before validators halted it during the Tectonic exploit. This is the official calculation of funds not recovered by the subsequent network rollback. An investigation report revealed that collateral price manipulation led to borrowings of approximately $120.4 million. Restoring the network to its pre-exploit state reversed transactions worth about $111.2 million, leaving 7.6% of the affected funds, or $9.19 million, outside the network. This figure is higher than the $8.3 million previously tracked on Ethereum by blockchain data provider Bitquery and confirms the incident's scale, which was earlier estimated at around $75 million. The attack, as previously reported, drained nine Tectonic lending markets via 11 transactions involving stablecoins, Bitcoin, Ether, and other assets. According to Bitquery, the attacker deposited $5 million and then executed a 98-cycle loop of repeatedly borrowing and redepositing TONIC while buying the illiquid token. This caused TONIC's price to surge nearly 300-fold, which was followed by Tectonic's price oracle. Cronos stated that Tectonic detected the suspicious activity at 12:49 UTC on August 30, and validators stopped the network at 14:32:47 UTC. Block production resumed at 23:49:01 UTC after balance restorations.

cryptonews.ruIeri 08:37

Cronos Confirms: $9.2 Million Withdrawn from the Network Before Rollback After Tectonic Exploit

cryptonews.ruIeri 08:37

The Most Expensive White Hat Bounty in History? Liquid Attacker Drained 4000 BTC, Left $47 Million, Community Divided

In a major security incident, Bitcoin sidechain Liquid Network suffered an abnormal transfer of approximately 4,000 BTC. The attacker exploited a range-proof caching bug in the Elements software, creating and withdrawing L-BTC that lacked real BTC backing, draining roughly 95% of the federated wallet's reserves. Following the attack, the actor communicated on-chain, identifying as a white hat and demanding that Blockstream, the operator, first patch the vulnerability. After Blockstream confirmed the fix, the attacker returned about 3,400 BTC (85% of the withdrawn amount) to the Liquid federation but retained 598.5 BTC (worth over $47 million) as a "bug bounty." This event has sparked significant debate within the crypto community. Some argue the action constitutes a high-value ransom rather than ethical white-hat behavior, as the attacker moved funds first and unilaterally decided the bounty size. Others defend the substantial reward, viewing it as a necessary incentive that could set a new standard for critical漏洞 disclosures, especially given historical underpayment or non-payment to security researchers by some projects. The incident highlights ongoing tensions in defining white-hat boundaries and the need for more transparent and reliable bug bounty frameworks.

marsbitIeri 08:21

The Most Expensive White Hat Bounty in History? Liquid Attacker Drained 4000 BTC, Left $47 Million, Community Divided

marsbitIeri 08:21

BNB Chain Exploit Drains 62 WBNB Through Existing Token Approvals

A BNB Chain DEX router lost 62.28 WBNB due to an exploit leveraging pre-existing user token approvals, as reported by security researcher ExVul on September 7. The attack affected 29 wallets without requiring private key compromises or price manipulation. The hacker impersonated a legitimate Uniswap V3 liquidity pool by exploiting a router vulnerability where factoryV3 settings were zero, disabling callback origin validation. Using a flash-swapped WBNB from PancakeSwap, the attacker created a fake pool contract. This contract invoked the router's swap callback, designating victims as payers, thereby gaining access to their pre-approved token allowances. The attacker then drained the approved tokens, converted them to BNB, repaid the flash swap, and kept the remaining funds. This incident highlights the risks associated with persistent token approvals granted to DEX routers. Users who previously approved the affected router (address: 0xa331fde028e6F17425AB9333c39ae43722340d24) are advised to review and revoke permissions. The stolen assets are irretrievable. The router team has not yet verified these claims, and the full scope remains unclear. This attack is unrelated to a separate $907,700 exploit reported in August.

TheNewsCryptoIeri 07:06

BNB Chain Exploit Drains 62 WBNB Through Existing Token Approvals

TheNewsCryptoIeri 07:06

Coldcard Hacker Moves 45% of Stolen Bitcoin Through THORChain

The hacker behind the third wave of attacks on the Coldcard wallet has accelerated the movement of stolen funds, transferring roughly 45% of the Bitcoin stolen in that wave. According to Galaxy Research, the perpetrator is using methods like THORChain to move Bitcoin to Ethereum and CoinJoin transactions to obscure the trail on the blockchain. The attacker opened 293 two-of-two multisignature vaults with the stolen Bitcoin and has begun draining the largest ones. While this activity has revealed new transaction patterns, the majority (82%) of all Bitcoin stolen across all Coldcard attack waves remains unmoved in the initial addresses. The third wave attack is part of one of 2026's largest crypto exploits, ranking third in reported losses. The incident highlights how stolen cryptocurrency can be laundered across different blockchain ecosystems.

TheNewsCrypto2 giorni fa 12:35

Coldcard Hacker Moves 45% of Stolen Bitcoin Through THORChain

TheNewsCrypto2 giorni fa 12:35

Bitcoin Network Used by Exchanges Hit by $320 Million Exploit, Hacker Claims to Be "Good Guy"

The Liquid Network, a Bitcoin sidechain developed by Blockstream, has been hit by an exploit resulting in the withdrawal of approximately 4,000 BTC (worth around $320 million) from its federation wallet, which held about 4,200 BTC. The network has paused all new transactions. Unlike typical hacks involving private key theft, this incident stemmed from a software vulnerability in the open-source Elements platform that underpins Liquid. The funds were withdrawn via the authorized platform SideSwap. The attacker, claiming to be a "white-hat hacker," has communicated via on-chain messages, stating the funds will be returned after the vulnerability is patched and all nodes are secured. The Liquid Network, governed by a federation of over 80 exchanges and companies, is working to restore services. This event raises security concerns for the sidechain model, designed to enable faster Bitcoin transactions. The incident follows other recent security breaches in the crypto space. Liquid has not yet announced a timeline for resuming operations or confirmed the recovery of the funds.

marsbit2 giorni fa 10:56

Bitcoin Network Used by Exchanges Hit by $320 Million Exploit, Hacker Claims to Be "Good Guy"

marsbit2 giorni fa 10:56

Third Wave Coldcard Wallet Attacker Moves 45% of Stolen Bitcoin

According to Galaxy Research, the attacker behind the third wave of the Coldcard wallet exploit has moved approximately 45% of the stolen Bitcoin (BTC), channeling funds through THORChain or into CoinJoin transactions. The attacker began moving funds to Ethereum via THORChain on September 2. In recent movements, the bitcoins were sent to CoinJoin rounds, which mix multiple users' payments into a single transaction to complicate fund tracing. Galaxy reported that the third-wave attacker created 293 "2-of-2" multisig vaults to store victims' coins and has been moving funds from the largest vaults in descending order of size, with the 11 largest vaults already emptied. These transactions helped Galaxy identify a previously unknown vault, likely holding funds from another Coldcard victim, though the cause of that loss remains unconfirmed. Across all Coldcard exploit waves, about 82% of the stolen bitcoin remains in the attacker's original addresses, while 18% has been moved, presumably for laundering purposes. The Coldcard exploit is the third-largest in 2026, behind the $293 million Kelp DAO hack and the $280 million Drift protocol hack, per DefiLlama.

cryptonews.ru2 giorni fa 10:07

Third Wave Coldcard Wallet Attacker Moves 45% of Stolen Bitcoin

cryptonews.ru2 giorni fa 10:07

Coldcard third-wave attacker moves 45% of stolen Bitcoin

According to Galaxy Research, the attacker behind the third wave of the Coldcard wallet hack has moved approximately 45% of the stolen Bitcoin. The funds were routed through THORChain to Ethereum or into CoinJoin transactions to obscure their trail. The exploiter used 293 multisignature vaults and is moving funds from the largest ones in order of size, with 11 of the biggest vaults now emptied. One previously unknown vault, likely holding another victim's funds, was identified through these transactions. Overall, about 82% of all Bitcoin stolen in the Coldcard exploit remains in the original addresses, with 18% moved for apparent laundering. The hack is the third-largest crypto exploit of 2026.

cointelegraph2 giorni fa 09:46

Coldcard third-wave attacker moves 45% of stolen Bitcoin

cointelegraph2 giorni fa 09:46

White Hackers Withdrew $320 Million from Liquid Network Using Artificial Token Emission

On September 6, 2026, nearly 4,000 BTC (approx. $320 million) was withdrawn from the Liquid Federation wallet on the Bitcoin sidechain, Liquid Network, by presumed "white hat" hackers. The attackers exploited a vulnerability in the Elements software, allowing them to artificially create 4,000 L-BTC tokens (pegged 1:1 to BTC) and legitimately exchange them for real Bitcoin via the peg-out mechanism. The service provider SideSwap processed the exchange, destroying the fake L-BTC and releasing the BTC from the federation's reserves. Blockstream, the developer of Liquid Network, confirmed the federated keys were not compromised. The attack only affected the L-BTC peg mechanism; other assets on Liquid were untouched. Following the incident, the attackers communicated via a Bitcoin blockchain message, identifying themselves as white hats and initiating negotiations. They have promised to return a "large part" of the funds once the vulnerability is patched. This incident highlights a recurring risk in cross-chain bridges: attacks targeting token issuance logic rather than storage keys. While the main Bitcoin chain remains unaffected, the event underscores the systemic reliance on trust in bridge code and the challenges in detecting such vulnerabilities until funds are withdrawn. Negotiations between Blockstream and the attackers are ongoing.

cryptonews.ru2 giorni fa 09:46

White Hackers Withdrew $320 Million from Liquid Network Using Artificial Token Emission

cryptonews.ru2 giorni fa 09:46

活动图片

Bitcoinright-arrow

Technology Trendsright-arrow