ChainCatcher news, according to Decrypt, the cryptocurrency exchange platform BingX has fully restored its operational capabilities following a recent hot wallet incident, with all deposits and withdrawals back to normal. To address this incident, BingX has launched a new "ShieldX" program, a comprehensive initiative aimed at enhancing the platform's security infrastructure."ShieldX" introduces an upgraded wallet firewall designed to provide advanced protection against external threats, further safeguarding user assets. BingX has also partnered with leading third-party security firms to implement additional round-the-clock monitoring and threat detection, ensuring the swift and proactive identification and resolution of any vulnerabilities.

ChainCatcher message, WazirX responded to the theft incident on X: "We have noticed that one of our multi-signature wallets has encountered a security breach. Our team is actively investigating this incident. To ensure the safety of user assets, INR and cryptocurrency withdrawals will be temporarily halted, and further updates will be provided in the future."

ChainCatcher message, OKX's Chinese Twitter post indicates that it has noticed information about "OKX platform user accounts being hacked" circulating online. In fact, the platform has been following up on the incident from the very beginning and has been assisting the relevant parties in handling it. The matter is currently in the judicial process stage, and the progress of the incident cannot be disclosed at this time as per requirements.

According to ChainCatcher news and Beosin Alert monitoring, 4502.9 BTC (approximately $305.9 million) stolen from the Japanese cryptocurrency exchange DMM Bitcoin has been transferred to the address 1B6rJRfjTXwEy36SCs5zofGMmdv2kdZw7P and is currently distributed to 10 addresses.

ChainCatcher news, Alex Labs officially released an update on the theft incident on social media, stating that based on their investigation results and discussions with security partners, it seems unlikely that the attackers will negotiate. Therefore, Alex Labs will continue to work with law enforcement to seek support for recovering and tracking the attackers.The official statement indicated that the current priority is to recover a total of 13.7 million STX and to develop a financial allocation plan to support the affected users. Details of the plan will be announced soon.

ChainCatcher news, according to on-chain analyst Yu Jin's monitoring, 25 minutes ago, the attacker of the theft of 1155 WBTC transferred 51 ETH to the victim's address and left a message for the victim: "Please leave your telegram and I will contact you."Previously, the victim who was phished for 1155 WBTC had repeatedly called out to the phishing gang on-chain, expressing a desire for the gang to return 90% of the funds and keep 10% as a bounty. However, the phishing gang did not respond.

ChainCatcher message, Polyhedra Network responded to the attack incident stating that after investigation, the incident is unrelated to the security of the Polyhedra bridge. The Polyhedra bridge has been audited by multiple auditing firms and is currently operating normally, with no asset security issues for users. The incident was due to human theft and not a contract vulnerability. Relevant personnel will be held legally accountable.According to monitoring by Shield, this attack incident was caused by key leakage.Previously, according to monitoring by Cyvers Alerts, the Web3 full-stack interoperability infrastructure Polyhedra Network was attacked on the BNB chain due to a wallet access vulnerability, resulting in the attacker extracting $1.4 million, including $700,000 worth of THE tokens, which were then all exchanged for BNB. The attacker’s funds came from Tornado Cash.

ChainCatcher news, according to PeckShieldAlert monitoring, approximately $73.5 million worth of cryptocurrency on Ethereum was stolen in the Curve Reentrancy vulnerability. So far, about 73% (approximately $52.3 million) has been returned. The remaining value of approximately $19.7 million in cryptocurrency on Ethereum has not yet been returned by the first Curve CRV-ETH exploiters (0xb752...b324).The details of the returned funds are as follows: AlchemixFi returned in full: $22 million (including 7,258 ETH + 4,821 alETH) Jpegd Frontrunner returned 90%: $11.5 million (equivalent to 5,495.4 WETH) Metronome ($1.6 million) + CRV pool ($5.3 million) returned by c0ffeebabe.eth: $7 million Alchemix (white hat operation): $13 million. (source link)

ChainCatcher news, on-chain analyst ZachXBT tweeted that the largest single victim loss in the Atomic Wallet theft incident has risen to 3.5 million USDT. According to the current investigation, the total amount of funds in the top 5 victim addresses has reached 9.7 million dollars.Earlier, ChainCatcher reported that on-chain analyst ZachXBT tweeted that, according to preliminary statistics, the value of assets stolen in this incident, including BTC, ETH, TRON, BNB, ADA, XRP, DOT, ATOM, ALGO, AVAX, XLM, LTC, and DOGE, has exceeded 14 million dollars, and he personally estimates that at least 20 million dollars worth of assets were stolen in this incident. The previously observed largest single victim loss was 2.8 million USDT. (source link)

ChainCatcher news, Aave updated on its social platform regarding the follow-up of the Yearn Finance theft incident, stating that the theft incident has no impact on Aave v1.ChainCatcher previously reported that Yearn Finance indicated the theft incident has no impact on Aave v2 and v3, while the impact on Aave v1 is being confirmed, and the most original version of the protocol has been frozen. (source link)

ChainCatcher message, Aave stated on its social platform that the Yearn Finance theft incident has no impact on Aave v2 and v3. Since Aave V1 has been frozen since December 2022, the effect of this attack on the protocol is limited. Aave is closely monitoring the situation to ensure there are no further issues.Previously, there was community feedback that the Yearn Finance theft incident was triggered by hackers launching a flash loan attack through Aave v1. The Shield team indicated that the root cause of the incident may be a configuration error related to yUSDT that was exploited by hackers. (source link)

ChainCatcher news, encrypted KOL @CirrusNFT tweeted that a hacker attack resulted in the theft of several NFTs including CryptoPunks, BAYC, and Meebits, with losses valued at approximately 600 ETH. An hour earlier, Twitter user @CryptoNovo311 also tweeted that 4 of their CryptoPunks were stolen.According to reports, ZachXBT stated that the hacker seems to be the same person who stole about 111 NFTs from the NFT project KUMALEON, and this hacker typically uses FixedFloat as an exchange. (source link)

ChainCatcher news, Bitcoin core developer LukeDashjr disclosed on social media that his PGP key leak resulted in the theft of 200 BTC, amounting to approximately 3.5 million dollars.Zhao Changpeng responded that the Binance security team has been monitoring and providing assistance as much as possible. However, Zhao Changpeng later confirmed that since LukeDashjr is a U.S. user, although he has submitted a case (Case ID#71746804), the main battle cannot provide services for U.S. users, but he is willing to seek some legal advice before providing support.

ChainCatcher news, according to OKLink data, the total amount of on-chain assets involved in the BitKeep wallet theft incident reached 31 million USD, involving 4 chains: BSC, ETH, TRX, and Polygon, with a total of 50 hacker addresses. The reason for this large-scale theft is that hackers hijacked the latest installation package 7.2.9.Earlier, ChainCatcher reported that the SlowMist security team tweeted that they are conducting an in-depth investigation into the BitKeep wallet and have frozen some of the funds transferred by the hackers. (source link)