In what is the latest crypto heist to target the decentralized finance (DeFi) space, hackers have stolen digital assets worth around $160 million from a crypto trading company Winter Mute.
The hack involved a series of unauthorized transactions that transferred USD Coin, Binance USD, Tether USD, Wrapped ETH, and 66 other cryptocurrencies to the attacker’s wallet.
The company said its centralized funding (CeFi) and over-the-counter (OTC) operations were not affected by the security incident. He did not reveal when the hack took place.
– Advertising –
The digital asset market maker, which provides liquidity to several crypto exchanges and platforms, warned of a disruption of its services in the coming days, but stressed that it was “solvent with twice as much than this amount in equity”.
“We are (still) open to process[ing] this as a white hat, so if you are the attacker – contact us,” company founder and CEO Evgeny Gaevoy said. said in a tweet.
Details surrounding the exact exploit method used to perpetuate the hack are unknown at this time, although Gaevoy said the attack was likely caused by a “blasphemy-type exploit” in his trading wallet.
Wintermute further admitted to using Impiety, an Ethereum custom address generation software, alongside an in-house tool to generate addresses with many leading zeros as recently as June.
The open-source project is currently being abandoned by its anonymous maintainer, who goes by the name johguse, citing “fundamental security issues in private key generation.”
Incidentally, profanity was also thrown into the limelight last week after decentralized exchange (DEX) aggregator 1inch Network disclosed a vulnerability that could be exploited to recalculate private wallet keys from addresses created at the utility help.
Subsequently, the attack vector was exploited by malicious actors to drain $3.3 million from Ethereum addresses made with Profanity on September 16, 2022.
The Wintermute breach is the latest attack on DeFi protocols, including that of Axie Infinity, Harmony Horizon Bridge, Nomad, and Curve.Finance in recent months. Some of these thefts have been attributed to the North Korean-backed Lazarus Group.