Posts

Showing posts with the label attack

Trezor investigates phishing attack that left 66k users vulnerable

Hardware wallet company Trezor released a statement on a recent security incident, saying an unauthorized entity accessed its third-party support ticket portal. According to a Trezor blog entry, about 66,000 users had their contact information leaked during the phishing attack . Per the hardware wallet manufacturer, the victims may include customers who have interacted with Trezor’s support team since the end of 2021.  Nonetheless, Trezor — launched in 2013 by Czech Republic-based tech firm Satoshi Labs — emphasized that no digital assets were compromised during the attack .  The startup promised to investigate the matter while working closely with the third-party service provider. It has also sent emails to all the affected contacts with the details of the incident. Although unconfirmed, we consider it our responsibility to inform our affected users of the possibility of their contact details having been exposed, and at risk of a phishing attack. Acting out of an abundance of

Allbridge offers bounty to exploiter who stole $570K in flashloan attack

Allbridge offered a hacker who pilfered $573,000 from its platform a chance to come forward as a white hat and forgo any legal ramifications. The attacker behind a $573,000 exploit on the multi-chain token bridge, Allbridge, has been offered a chance by the firm to come forward as a white hat and claim a bounty. Blockchain security firm Peckshield first identified the attack on April 1, warning Allbridge in a tweet that its BNB Chain pools swap price was being manipulated by an individual acting as a liquidity provider and swapper, which allowed them to drain the pool of $282,889 in Binance USD (BUSD) and $290,868 worth of Tether (USDT). In an April 1 tweet following the hack, Allbridge offered an olive branch to the attacker in the form of an undisclosed bounty and the chance to escape any legal ramifications. To hacker's attention: addressing the incident and the next steps 1. We continue monitoring the wallets, transactions, and linked CEX accounts of individuals involved in t