BlockThreat - Week 36, 2021

Zabu | CREAM | Mango | CipherTrace | North Korea

Welcome to BlockThreat!

In this edition we will focus on education by reviewing the latest in blocksec research and tools. Avalanche network experienced its first major DeFi hack while another DeFi project on Solana have narrowly avoided losses thanks to a timely report and exploiting itself to save funds. On the more positive news, a money laundering network used by North Korean attackers was dismantled and CREAM got most of their funds back.

Let’s dive into the news, but first a special thank you to all of the Gitcoin Grant supporters. You folks rock!

News

• Mastercard acquires CipherTrace, a blockchain forensics company.

• Ghaleb Alaumary sentenced to 11 years in jail for laundering funds such as those coming from a banking heist by North Korean actors.

• CREAM Finance attackers partially returned stolen funds.

Hacks

• On September 12, 2021 Zabu Finance, an Avalanche-based DeFi project, lost $3.2 after an attacker exploited a bug in its Transfer Tax logic.

Vulnerabilities

• Mango Markets, a Solana-b…