Долгосрочная атака на инвестора HEX и предотвращенная утечка Morpho Labs — новости кибербезопасности

cryptonews.ruPublished on 2024-01-11Last updated on 2025-04-11

Инвестор HEX19 потерял более $4,5 млн после взлома кошелька, который произошел из-за хранения сид-фразы в облаке.
Злоумышленник пытался вывести $2,6 млн из приложения Morpho Blue, но известный MEV-оператор c0ffeebabe.eth опередил хакера и перехватил средства.

Долгосрочный инвестор в HEX, известный как HEX19, потерял более $4,5 млн в результате взлома. Об этом пишет Cointelegraph со ссылкой на собственные источники.

Злоумышленник постепенно выводил средства с кошелька инвестора, на котором токены HEX находились в стейкинге. Сначала сообщество решило, что владелец сам снимает средства. Но затем стало ясно — кошелек взломали.

Хакерская атака растянулась на несколько лет: первая утечка средств зафиксирована в конце 2021 года, а последняя — в марте 2025. Средства проходили через фишинговые адреса, связанные с онлайн-персоной Konpyl.

Этот же злоумышленник фигурировал в других схемах, включая фейковый кошелек Rabby.
Согласно инсайдерской информации, кошельки взломщика пересекаются с адресами, использованными в схемах Inferno Drainer — сервиса для фишинговых атак.

«HEX19 стал жертвой из-за хранения сид-фразы в облаке», — отметил анонимный эксперт.

По его словам, злоумышленник действовал по характерной для Konpyl схеме.

Первая крупная транзакция произошла 21 ноября 2021 года — с кошелька HEX19 отправили почти $4 млн в HEX. Деньги распределили по нескольким адресам. Часть средств попала в Tornado Cash, другая — на биржи и в DeFi-протоколы для отмывания.

К 2024 году хакеры вывели еще $108 000.

HEX19 не рассчитывает вернуть деньги, но надеется, что его опыт поможет другим дважды подумать, прежде чем хранить свои сид-фразы в Интернете.

Часть его средств до сих пор застейкана, но хакеры могут получить их после разблокировки.

Атака на Morpho Labs

10 апреля команда Morpho Labs обновила интерфейс приложения Morpho Blue. Через сутки хакер воспользовался уязвимостью, связанной с изменениями, и вывел с одного из адресов $2,6 млн. Блокчейн-аналитики из PeckShield подтвердили утечку.

#PeckShieldAlert An address appears to have suffered a $2.6M exploit due to a #MorphoBlue frontend vulnerability and was frontrun by c0ffeebabe.eth. The funds were transferred to 0x1A5B…C742. pic.twitter.com/ye4cSyEe20
— PeckShieldAlert (@PeckShieldAlert) April 11, 2025

Однако известный MEV-оператор под псевдонимом c0ffeebabe.eth предотвратил вывод средств. Он опередил злоумышленника, перехватив средства и переведя их на другой адрес. Информации о том, вернули ли средства владельцам, на момент публикации не поступало.

После инцидента Morpho Labs отменила обновление интерфейса.

The Morpho team was alerted to an issue in yesterday's Morpho App frontend update.

We have reverted the changes and restored normal operation.

All funds in the Morpho Protocol are safe and unaffected.

The Morpho team will provide a detailed update later today in this thread.
— Morpho Labs 🦋 (@MorphoLabs) April 11, 2025

Согласно заявлению компании, работа протокола возобновлена, а средства пользователей в безопасности. Также команда подтвердила, что причина проблемы устранена, а детали расследования опубликуют позже.

C0ffeebabe.eth известен восстановлением средств после DeFi-атак. В 2023 году он вернул $5,4 млн, похищенных из Curve Finance. В 2024 он же предотвратил вывод средств из протокола Blueberry.

Напомним, общая сумма ущерба от 265 криптовзломов за весь 2024 и первые два месяца 2025 года превысила $3,83 млрд, сообщили специалисты Global Ledger.

В Immunefi заявили о худшем квартале для криптоиндустрии

Dogecoin price sinks to 2023 lows – Can DOGE hold above $0.067?

Dogecoin (DOGE) fell to $0.069, its lowest price since October 2023, following a broader market crash, breaching the key $0.07 support. It later slightly recovered to $0.071. The decline was driven by strong sell-side pressure, with a 32% surge in trading volume to $819 million and a negative buy-sell delta. This triggered over $5 million in long liquidations. Despite initial capital outflows from futures, the 12-hour timeframe showed a net inflow of $10.7 million as some traders opened new positions. However, sellers dominate the spot market. The daily RSI entered deeply oversold territory at 21, indicating extended weakness. The analysis suggests if current conditions persist, DOGE could drop further toward $0.067. For a bullish reversal, it needs to close above the $0.074 resistance level.

ambcrypto19m ago

Dogecoin price sinks to 2023 lows – Can DOGE hold above $0.067?

ambcrypto19m ago

Former Ethereum Foundation enterprise team launches Ethereum Institutional

Former Ethereum Foundation enterprise team members have launched Ethereum Institutional, an independent non-profit organization aimed at accelerating institutional adoption of Ethereum, its Layer 2 networks, applications, and broader ecosystem. It will serve as a neutral point of contact, offering financial institutions technical guidance, ecosystem intelligence, and engagement support for long-term infrastructure decisions involving tokenization, stablecoins, and on-chain finance. The founding team, which previously built the Ethereum Foundation's enterprise engagement function, will scale its work through five core areas: Institutional Engagement, Institutional Intelligence, Ethereum Ecosystem and ETH Marketing, Industry Discovery and Requirements, and Events and Convenings. The non-profit is backed by anchor funders Bitmine, SharpLink, and Ethereum co-founder Joseph Lubin. This launch follows recent Ethereum ecosystem developments, including the Ethereum Foundation's organizational restructuring and the creation of Ethlabs, an independent R&D organization. These initiatives reflect a broader strategy to support specialized, independent organizations that advance Ethereum's long-term adoption.

ambcrypto41m ago

Former Ethereum Foundation enterprise team launches Ethereum Institutional

ambcrypto41m ago

Is Riot Platforms’ 500 BTC sale an early warning for Bitcoin’s Q3?

The article discusses how the shift from Bitcoin mining to AI is emerging as a risk for Bitcoin in Q3 2026, highlighted by Riot Platforms' recent sale of 500 BTC (worth ~$30 million). Despite Bitcoin's price falling below $57k, Riot's stock outperformed, closing Q2 up 120%. The company sold more BTC than it mined last quarter, reducing its treasury to fund AI and data center investments. This reflects a broader trend where miners, facing pressure as Bitcoin's market price sits below the estimated $78k production cost, may increasingly use BTC reserves as cash to diversify into AI. The rising Bitcoin hashrate further squeezes miner profits, potentially accelerating this strategic pivot. Riot's sale could be an early warning of this structural shift heading into Q3.

ambcrypto1h ago

Is Riot Platforms’ 500 BTC sale an early warning for Bitcoin’s Q3?

ambcrypto1h ago

The Largest Upgrade Since The Merge? How Glamsterdam Will Affect Ethereum and Regular Users?

The upcoming Glamsterdam upgrade, scheduled for late 2026, is considered Ethereum's most significant change since The Merge. It focuses on fundamentally restructuring Ethereum's block production, transaction execution, and gas pricing to enable major scalability improvements while preserving decentralization. The upgrade centers on three key innovations: * **Enshrined PBS (ePBS)**: Moves the Proposer-Builder Separation mechanism into the protocol's core, eliminating reliance on external relays. This reorganizes the block pipeline, extending the time window for processing execution payloads, which is crucial for safely increasing block capacity. * **Block-Level Access Lists (BALs)**: Attaches a "map" to each block, declaring in advance which state data its transactions will access. This enables potential parallel transaction processing and faster node synchronization, breaking a key performance bottleneck. * **Gas Repricing**: Introduces a more accurate resource pricing model by separating computation costs from state storage costs. This discourages uncontrolled state growth by making operations that create permanent data (like new accounts) more accurately reflect their long-term network burden. Together, these changes aim to solve the core challenges of increasing Ethereum's throughput (e.g., raising the Gas Limit) without overburdening node hardware or increasing centralization risks. They prepare the infrastructure for higher capacity, targeting a credible post-upgrade capacity of up to 200 million Gas. For users, the impact will be nuanced: * General transaction fees may become lower and more stable as block space increases. * Simple transfers could see cost reductions, while state-intensive operations (like contract deployment) may become relatively more expensive due to the new gas model. * Gas fee estimations by wallets will become more accurate. * L2 networks could benefit long-term from increased data blob capacity. * Standardized logs for all ETH transfers (EIP-7708) will improve tracking for wallets and exchanges. Ultimately, Glamsterdam represents a foundational shift, not a simple block size increase. It seeks to expand Ethereum's capacity by re-engineering its underlying mechanics, maintaining its commitment to decentralization while enabling significant performance gains.

marsbit2h ago

The Largest Upgrade Since The Merge? How Glamsterdam Will Affect Ethereum and Regular Users?

marsbit2h ago

Circle CEO Responds to the OUSD Challenge: Stablecoin is a Winner-Takes-All Business, and We Won't Slow Down

In response to questions about the OUSD stablecoin initiative, Circle CEO Jeremy Allaire argues that the stablecoin market is a "winner-take-most" platform business driven by powerful network effects, and Circle has no plans to slow down. He outlines three key drivers behind USDC's dominant position: 1. **Protocol/Software Layer Network Effects**: The value of a stablecoin network grows as more developers and services integrate it, creating compounding utility and user preference. Circle has spent nearly a decade building this ecosystem with USDC, now accelerated by mainstream adoption and enhanced by software stacks like CCTP and Gateway for interoperability. 2. **Liquidity Network Effects**: Liquidity begets more liquidity. USDC has achieved top-tier global liquidity—ranking among the top three digital assets alongside BTC and USDT—through nearly a decade of building deep primary and secondary market access across regions and venues. 3. **Regulatory and Policy Integration**: Establishing a global stablecoin requires deep regulatory engagement, licensing, and compliance across key markets—a significant, long-term investment where Circle is a leader. Allaire cites Artemis data showing USDC facilitated 80% of all dollar stablecoin on-chain transaction volume in Q1 2026, with USDT at 20% and all others negligible. He addresses OUSD's purported advantages: "free" minting/burning is often not sustainable in practice; redistributing all revenue can starve essential infrastructure investment; and large consortium models historically struggle with inefficiency and slow execution, unlike focused strategic partnerships. He reaffirms Circle's strong ongoing partnership with Coinbase on USDC and notes Circle collaborates with dozens of other stablecoin issuers through its expanding platform (Arc, CCTP, CPN, etc.). While welcoming OUSD to the ecosystem, Allaire asserts that Circle's vast, trusted network and continued investment make USDC the foundational digital dollar infrastructure for the world.

链捕手2h ago

Circle CEO Responds to the OUSD Challenge: Stablecoin is a Winner-Takes-All Business, and We Won't Slow Down

链捕手2h ago

Trading

Spot