ChainCatcher message, Slow Fog issued an alert stating that Tether has just frozen 11 TRON addresses and 7 Ethereum addresses.

ChainCatcher news, according to BlockSec Phalcon, a contract on the BSC chain has encountered suspicious transactions, which appear to be related to an inactive NFT project StepHeroNFTs, and has been detected as a typical reentrancy attack.The contract is not open source, and this attack has resulted in a loss of approximately $90,000.

ChainCatcher news, digital asset wallet TokenPocket issued a statement in response to the incident on February 14, where user assets were aggregated and stolen by hackers. Technical analysis revealed that affected users had downloaded a third-party mining software called "Bom," which exhibited malicious behavior by unauthorized access to users' photo albums and uploading data, leading to the leakage of users' mnemonic phrases or private keys.TokenPocket has collaborated with security teams such as SlowMist Technology and GoPlusSecurity, and reminds users to immediately stop using unverified third-party tools, and to avoid saving mnemonic phrases and private keys through screenshots, social platforms, cloud storage, and other methods.

ChainCatcher message, Scam Sniffer issues a warning, currently using Google to search for "Four Meme" will display phishing links impersonating the official Four.Meme platform, users should remain vigilant.

ChainCatcher message, according to feedback from GoPlus users, some assets have been stolen. After security monitoring, the theft address was newly created yesterday, and it has currently aggregated over 1 million dollars in assets to the address 0x49add3e8329f2a2f507238b0a684d03eae205aab.GoPlus speculates that this may be due to the bulk theft of private keys from a trading platform or Trading Bot users. Users are urged to quickly check the security of their wallet assets and install the GoPlus security plugin to monitor risks in real-time and protect their assets.

ChainCatcher message, according to BlockSec Phalcon monitoring, it has detected suspicious transactions involving multiple chains, resulting in losses of approximately $170,000, initiated by the same address.Analysis indicates that due to insufficient access control, attackers were able to forcibly inject funds into fraudulent Uni-V3 pools and profit from them.

ChainCatcher news reports that according to Yu Xian, the founder of Slow Mist, the lending protocol zkLend on the Starknet chain was hacked on February 12, resulting in losses exceeding $9.5 million. The reason for the attack lies in the safeMath library used by its market contract, which employs direct division for calculations. This led to a rounding error in the actual number of zTokens that needed to be burned during withdrawals, which the attacker exploited for profit.On-chain data shows that the attacker's address has an active history of 235 days and has interaction records with multiple platforms, including Binance. The hacker has since transferred the stolen funds across chains, with most of it moved to the Ethereum network. Yu Xian stated that by tracking the associated Starknet addresses, it was discovered that this attacker is linked to the hacking incident of EraLend on July 25, 2023.

ChainCatcher message, regarding today's zkLend theft of over 9 million dollars, SlowMist released an analysis stating that the core reason for this attack lies in the safeMath library used in the market contract. During division calculations, direct division was used, resulting in a rounding vulnerability when calculating the actual amount of zToken that needs to be burned during withdrawals. Attackers may exploit this vulnerability to gain illegal benefits.Users are advised to closely monitor their asset status on zkLend and temporarily halt any deposit actions related to zkLend to avoid potential losses.

ChainCatcher news, according to Cyvers Alerts monitoring, the lending protocol zkLend suffered a vulnerability attack on the Starknet network, resulting in a loss of $4.9 million. The attacker attempted to transfer the stolen funds across chains to Ethereum and launder them through the privacy protocol Railgun, but due to Railgun's policy restrictions, the funds were forcibly returned to the original address.In previous news, zkLend has offered a 10% white hat hacker bounty to the attacker through on-chain messages, and the related transaction has been confirmed on the Ethereum blockchain.