Four separate DeFi projects were exploited last week with $30M worth of crypto stolen, GoDaddy had its own Twitter moment with multiple cryptocurrency-related projects attacked, scammers are getting creative with DEX, and more in this week’s edition of Blockchain Threat Intelligence.
Crime
Social engineering campaign targeting GoDaddy employees used to attack multiple cryptocurrency businesses including NiceHash, Liquid Exchange, and others.
Scammers are creating fake liquidity pools on DEXs such as Uniswap to trick users into purchasing doppelgänger tokens. For example, a fake Deriswap token was created and immediately deployed on Uniswap. Within minutes, the scammer made off with a ~92 ETH profit.
Hacks
On November 21, 2020 Pickle Finance’s pDAI PickleJar was hacked which resulted in the loss of 19.76M DAI. A whitehat team was able to quickly analyze and replicate the exploit and help Pickle Finance implement mitigations. Interestingly, the loss was covered by COVER protocol insurance.
On…
Keep reading with a 7-day free trial
Subscribe to Blockchain Threat Intelligence to keep reading this post and get 7 days of free access to the full post archives.