ChainCatcher news, Fuzzland co-founder Chaofan Shou stated on social media that the decentralized trading platform Clipper was hacked due to an API vulnerability (such as private key leakage). Currently, losses exceed $500,000, with $6.5 million at risk. He urges users to withdraw their funds immediately.

ChainCatcher news, according to on-chain security monitoring agency BitJungle, the hacker address that stole the private keys of the DeFi blogger "Mining Little Penguin" has shown signs of activity after being silent for one year and ten months.The hacker has converted 4 million DAI into ETH, of which 900 ETH has entered a mixer, while the remaining ETH is still held in the hacker's address.It is reported that "Mining Little Penguin" experienced the private key theft incident on January 14, 2023, with the stolen assets valued at approximately 7.9 million dollars.

ChainCatcher message, DEXX founder Roy posted on social media that a third-party independent security company will publicly disclose all hacker addresses within a few hours and asks everyone to help monitor for any unusual activity and to contact each platform for blocking and interception as soon as possible. The statistics on all affected addresses and amounts have basically been completed.A compensation channel will be opened within the DEXX platform. Currently, the DEXX security upgrade has not been completed, so please do not deposit any funds into DEXX (today, there are still users whose deposited funds were stolen by hacker scripts that have not yet been shut down), and it may also not be possible to return assets through the original route (because the hacker has control of the private keys). The product will be upgraded with a brand new compensation address for refunding funds, and more details regarding law enforcement, institutional investment and endorsement, and compensation plans will be announced soon.

ChainCatcher message, according to a report by Immunefi, crypto hackers stole over $71 million worth of digital assets in November. The total value of stolen cryptocurrency in 2024 has exceeded $1.48 billion.The report states: "Overall, so far in 2024, we have lost $1,489,921,677 due to hacking and theft in 209 specific incidents. This figure represents a 15% decrease compared to the $1,757,680,745 loss during the same period in 2023."

ChainCatcher news, Microsoft detailed a group of North Korean hackers in a blog post, known as "Sapphire Sleet," who disguise themselves as recruiters and venture capitalists with the aim of stealing cryptocurrency from individuals and companies. After contacting targets with bait or initial outreach, the North Korean hackers would arrange a virtual meeting, but the meeting is actually designed to load abnormally.In the scenario of impersonating VCs, victims are forced to download malware disguised as a fix for the virtual meeting tool. In the activities of impersonating recruiters, potential candidates are asked to download and complete a skills assessment, which actually contains malware. Once installed, the malware can access other information on the computer, including cryptocurrency wallets. Microsoft stated that within just six months, the hackers stole at least $10 million in cryptocurrency, and have stolen billions of dollars in cryptocurrency over the past decade.

ChainCatcher message, according to the monitoring by Shield, XT Exchange seems to have been hacked, resulting in a loss of approximately 1.7 million dollars in cryptocurrency. The hacker has exchanged the stolen funds for 461.58 ETH.

ChainCatcher news, Gaia partners with Coinbase to launch "The First Fully-Autonomous AI agent" hackathon. Gaia has announced the organizers, judges, and rewards; the AI agent will be fully automated from 0 to 1. This includes organizer HAL, judge Vital-AI-iK, and award presenter Jamie D-AI-Mon.Registration period: November 28Event duration: November 29 - December 13

ChainCatcher news, according to an investigation by ZachXBT, hacker Serpent initiated a meme coin scam by controlling 9 accounts, including McDonald's and Kabosu, on X platform and Instagram, stealing approximately $3.5 million, and using part of the funds for online casino gambling.Serpent was a professional Fortnite player in Australia and was released by the esports organization Overtime in 2020 for alleged cheating. In March 2022, he co-founded the NFT project DAPE, but the project later experienced a rug pull. In March 2024, Serpent launched another project called ERROR, which also experienced a rug pull, leading to his ban from the X platform.Previous news, ZachXBT stated that attacks on social media accounts of McDonald's and the owner of Kabosu over the past few months have resulted in losses exceeding $3.5 million.

ChainCatcher message, Slow Mist founder Yu Xian tweeted a reminder that a certain hacker organization has recently been found targeting the Crypto industry with directed poisoning attacks. The method involves impersonating VCs to send fake meeting links, guiding victims to download malicious scripts (such as "IP_Request.scpt"), with the main attack targets being Mac computer users.If you encounter this, it is recommended to take the following measures immediately:Asset Transfer: If your computer has wallets (private keys/seed phrases), promptly transfer the assets to a safe location;Account Inspection: Change passwords and 2FA for important accounts (such as Telegram, X, email, trading platforms, etc.) and check for any unusual login devices;Virus Cleanup: Use well-known antivirus software (such as AVG, Bitdefender, Kaspersky, etc.) for a comprehensive scan, and if necessary, use multiple software alternately for scanning;System Reset: If you are still not at ease, back up important files and then reset your computer, scanning each backup file for viruses.

ChainCatcher message, DEXX founder Roy stated that his team is fully investigating and identifying the hackers in collaboration with law enforcement agencies and several security companies, determined to recover the stolen funds. In the past week, the team has been working with multiple security experts to reconstruct and upgrade the asset security plan to ensure the safety of users' assets going forward. The team is currently formulating a compensation plan and will carefully verify every transaction for affected users.He also mentioned that DEXX has obtained a lot of valid information through legal channels, and if the hackers proactively contact within 48 hours and are willing to communicate with a problem-solving attitude, otherwise, they will be pursued to the end.

ChainCatcher news, the South Korean police have confirmed for the first time that the 342,000 Ethereum stolen from the cryptocurrency exchange Upbit in 2019 was carried out by the North Korean reconnaissance agency's hacker groups "Lazarus" and "Andariel." The police reached this conclusion through evidence obtained from North Korean IP addresses, the flow of cryptocurrency assets, and cooperation with the FBI.Among them, 57% of the Ethereum was exchanged for Bitcoin at a low price, while the remaining assets were laundered through 51 overseas exchanges. After four years of tracking, the police successfully recovered 4.8 Bitcoin (approximately 600 million Korean Won) from a Swiss exchange and returned it to Upbit.

ChainCatcher news reports that, according to the indictment, U.S. prosecutors have charged five members of the "Scattered Spider" gang with hacking dozens of companies and individuals, resulting in the theft of sensitive data and at least $11 million in cryptocurrency. Prosecutors stated that approximately $4 million of the stolen cryptocurrency has been recovered, and investigators are still calculating the total value involved in the data theft.California federal prosecutors said the defendants used various fraudulent methods, including SMS phishing and SIM swapping, to obtain legitimate credentials from employees in order to gain unauthorized access to their accounts and company networks from late 2021 to spring 2023. U.S. authorities indicated that the defendants exploited this access to steal confidential data and identify and access individuals' cryptocurrency accounts and wallets.It is reported that Scattered Spider is a decentralized organization that often uses social engineering techniques to trick IT staff into accessing company networks, with some members located in the United States and the United Kingdom.

ChainCatcher news, the new edition of the BNB Hackathon series for 2024 will kick off today. This event has a prize pool of over $458,000. The workshop will start on November 26, and project submissions can be made from December 15 to December 24. This hackathon is community-driven, with no preset themes or wish lists.Winners will be announced on January 16, 2025, along with the launch of a one-month incubation period. A total of 6 winners will receive key support from BNB Chain, including one month of technical incubation support and direct interview eligibility for the MVB program.Developers can explore selected directions based on market trends and BNB Chain ecosystem priorities, such as:Stablecoins, DeFi, and Payments: Solutions to enhance financial efficiencyTelegram-based DApps and Infrastructure: Applications and tools for social and gamingAI-driven DApps and Infrastructure: Combining AI, DeFi, gaming, and other fieldsNew Narratives (DeSoc, DeSci, DeBio): Infrastructure linking Web3 and the real worldParticipants can also win exclusive rewards through sponsor challenges from UXUY, DEGO, THENA, Sonorous, Polyhedra, and Dorafactory.

ChainCatcher news, according to PeckShield monitoring, the address of the attacker exploiting the Polter Finance vulnerability has transferred a total of 2,625.7 Ethereum (ETH) to the privacy trading protocol Tornado Cash.