ChainCatcher news, according to PeckShieldAlert monitoring, the wallet address marked as the WazirX attacker has transferred 5000 ETH (approximately 11.6 million USD) to the new address 0x5990...b6a6a.

ChainCatcher news, according to Coin98 Analytics statistics, the recently recorded top 15 cryptocurrency attack incidents have resulted in total losses of approximately $313 million.Among them, 9 attacks were caused by contract vulnerabilities, while the others were due to malware, flash loan attacks, or unknown attack methods.

According to ChainCatcher news, monitoring by Shield has detected that the WazirX attacker marked address has transferred the 5th batch of 5000 ETH (worth approximately 11.8 million USD) to the new address 0xa4d1...9845, possibly preparing to launder the funds through a mixer.

ChainCatcher message: According to the latest statistics from blockchain security company Certik, there have been 8 reentrancy attack incidents from the beginning of 2024 to date, resulting in a total loss of approximately 30 million dollars. Among them, the attack on Penpie has become the largest reentrancy attack incident of 2024, and it is also the third largest reentrancy attack since January 2021.In terms of loss scale, the Penpie attack is second only to the Grim Finance attack that occurred in December 2021 (with losses of approximately 40 million dollars) and the Vyper vulnerability incident in July 2023 (with losses of approximately 52 million dollars).

ChainCatcher news reports that according to the monitoring by Pie Shield, there were over 10 hacker attacks in the cryptocurrency sector in August, resulting in losses of approximately $313.86 million.The two largest hacker attacks involved unauthorized transfers (phishing), accounting for 93.5% of the total stolen funds, amounting to $293.4 million. The top five hacking incidents in August 2024 were:Phishing: $238 million (#BTC);Phishing: $55.4 million (#DAI);Ronin: $12 million (refunded);Unauthorized transfer: $5.1 million;Nexera: $1.83 million.

ChainCatcher news, three executives from the crypto-friendly bank Evolve Bank & Trust have left the institution following setbacks, including a cybersecurity breach in May and law enforcement actions in June. Reportedly, the bank's Chief Credit Officer, Chief Financial Officer, and Chief Loan Officer for Open Banking have departed.The exit of these three executives is undoubtedly a blow to Evolve Bank & Trust, which provides behind-the-scenes banking services for several crypto-friendly fintech companies. According to Evolve's website, its partners include Mercury, which offers banking services to startups (including Web3 companies), and Stripe, which provides payment processing and crypto gateways.On August 6, Evolve announced that it had been targeted by a ransomware attack from the criminal organization LockBit, which accessed and downloaded customer information from its databases and file shares during February and May. Evolve refused to pay the ransom, resulting in the data being leaked.Additionally, in June, the Federal Reserve Board (FRB) initiated enforcement actions against the bank due to deficiencies in anti-money laundering, risk management, and consumer compliance, requiring Evolve to strengthen its risk management practices to address compliance and fraud risks.

ChainCatcher news, according to monitoring by Shield, the address marked by the Nomad Bridge attacker has transferred 14,500 ETH (worth approximately 35.2 million USD) to Tornado Cash.

ChainCatcher news, according to official news from WazirX, due to a network attack on its multi-signature wallet, WazirX has reported the case to the police, and the police have filed a case. The case was registered on August 5, 2024, at the Lodhi Colony Special Police Station in New Delhi under the BNS and IT Acts, handled by the Delhi Police's Intelligence Fusion and Strategic Operations (IFSO) department.WazirX expresses full confidence in the investigative agencies and will fully cooperate with the investigation. They are currently making active efforts to recover the stolen funds and hope to bring the responsible parties to justice.

ChainCatcher message, WazirX announced the preliminary investigation results of the attack on social media, which mainly include:There is no evidence that the machines of WazirX signers were compromised;The attack may have originated from Liminal's infrastructure, bypassing their final verification step;Contrary to some reports, no malicious transactions were signed before July 18, 2024;The attack involved a contract upgrade.WazirX believes that the attack was most likely due to vulnerabilities in Liminal's infrastructure leading to malicious transactions.

ChainCatcher message, the yield protocol Spectra (formerly APWine) has announced the disabling of the Spectra application and the termination of the router contract to curb coordinated attacks on its users and application interactions.This attack affected some users' deposits and withdrawals within the application. The situation is now under control, the core protocol contracts are unaffected, and internal funds are secure. Spectra will restore the Spectra application as soon as possible and release a post-mortem analysis report.

ChainCatcher news, according to MSNBC, U.S. Secret Service Director Kimberly Cheatle has resigned following the attack on Trump.

ChainCatcher news, Indian crypto trading platform WazirX stated on the X platform that it has noticed impersonators sending emails. While the team is actively monitoring and addressing these fraudulent activities, user vigilance is key. Please make sure to carefully check the email ID and avoid clicking on suspicious links.Previous news, the WazirX team plans to launch a bounty program to freeze/recover stolen assets.

ChainCatcher news, according to CoinDesk, WazirX and Liminal Custody are blaming each other for the $230 million cryptocurrency attack that occurred yesterday, leading to user concerns about the safety of their funds. WazirX stated that the attack involved a multi-signature wallet using Liminal's digital asset custody service. The attack was caused by discrepancies between the data displayed on the Liminal interface and the actual content of the transactions. Liminal, on the other hand, claimed that its infrastructure was not compromised and that all wallets, including WazirX's wallets, are secure. Liminal mentioned in a blog post, "Unfortunately, three victim machines injected malicious code into the transactions, indicating that this was a complex and planned attack targeting a specific Gnosis smart contract multi-signature wallet."WazirX filed a police report today and contacted the Indian Computer Emergency Response Team (CERT-In). According to a transparency report from June, the stolen funds accounted for over 45% of its $500 million holdings. Cryptocurrency security firm Elliptic stated that North Korean hackers appear to be behind the attack.

Arkham announced on X that the bounty task for the $235 million theft incident of WazirX has been completed by on-chain detective ZachXBT.ZachXBT submitted clear evidence proving that the attacker used the KYC-linked deposit address to obtain funds from the WazirX vulnerability. This meets one of the bounty criteria—"identifying KYC CEX deposits." This information will be shared with the WazirX team.

ChainCatcher news, blockchain analysis provider Elliptic stated that a hacker group linked to North Korea may be behind the "$235 million WAZIRX hack incident."

ChainCatcher message, Arkham announces a bounty for the $235 million WazirX theft incident, rewarding the following contributions:Identifying KYC CEX deposits;Exposing the identity of the attacker;Successfully recovering funds.Any information submitted by participants will be shared with the WazirX team.

ChainCatcher message, according to Beosin Alert monitoring and early warning, the cross-chain protocol LI.FI has been attacked. The Beosin security team found that the vulnerability was caused by the attacker using a call injection in the project contract to transfer the assets of users authorized to the contract. The LI.FI project contract has a function called depositToGasZipERC20, which can exchange specified tokens for platform tokens and deposit them into the GasZip contract. However, the code in the exchange logic does not restrict the data of the call, allowing the attacker to exploit this function for a call injection attack, extracting the assets of users authorized to the contract.Attacker address: 0x8B3Cb6Bf982798fba233Bca56749e22EEc42DcF3Attacked contract: 0x1231DEB6f5749EF6cE6943a275A1D3E7486F4EaEAs of now, the total loss includes 6.3359 million USDT, 3.1919 million USDC, and 169,500 DAI, approximately 10 million USD.Beosin Trace is currently tracking the stolen funds.

ChainCatcher news, according to Birdeye data, the concept coin FIGHT related to the "Trump Attack Incident" on Solana has surpassed $0.015, with a 24-hour increase of 507%, and a trading volume of $37.4 million in the past 24 hours.

ChainCatcher news, the decentralized lending protocol Minterest announced on X that the team is currently investigating the attack incident on Minterest. As a precaution, the Supply&Borrow operations on the Minterest App have been temporarily suspended, while Repay&Withdraw remains open. At this time, the attacker cannot take further action. The officials are working hard to resolve this issue and will restore full operations soon.According to Chaofan Shou, co-founder of fuzzland, Minterest has lost 1.4 million dollars.

ChainCatcher message, regarding the wallet attack incident on the Bittensor chain, on-chain detective ZachXBT monitored and discovered that an address starting with 5FbWTr had 32,000 TAO (worth 8 million USD) stolen.ZachXBT stated that the attack incident faced by Bittensor originated from a stolen private key.