ChainCatcher news, the security team Slow Mist tweeted that the stablecoin trading project Platypus on the Avalanche chain has been attacked again. Due to the oversight of the price difference between the two pools during token exchange via CoverageAratio, users were able to deposit USDC and then withdraw more USDT for arbitrage. Arbitrageurs profited approximately 50,000 USDC in this manner.

According to ChainCatcher news, monitoring by PeckShield indicates that an arbitrageur borrowed 82 ETH from dYdX to purchase BAYC #6762, thereby acquiring its staked 6400 APE. The arbitrageur sold the APE for 20 ETH and later sold BAYC #6762 for 68 ETH.It is reported that Twitter user @Degentraland stated that users who sell NFTs after staking APE in the NFT pool will lose their staked APE. NFT markets (such as Opensea, blur_io, etc.) should display relevant reminders on their user interfaces. (source link)

ChainCatcher news, PeckShield stated on Twitter that the arbitrage address (starting with 0x8d11) that profited over 15 million dollars from the attack incident via Ankr has transferred approximately 15.5 million BUSD and about 200,000 USDC to Binance. (Source link)

According to ChainCatcher news and Lookonchain data, during the GALA attack incident, a SmartMoney address arbitraged nearly 6.5 million dollars. Twenty minutes after the GALA attack, this SmartMoney address began purchasing GALA from the PancakeSwap pool, acquiring a total of 406 million GALA at a cost of only 120,380 dollars. Subsequently, it sold 21.1 million GALA on Binance at a unit price of 0.032 dollars, and sold 385.8 million GALA on Huobi at a unit price of 0.015 dollars, resulting in a profit of nearly 6.5 million dollars, even exceeding the profits of the attacker. (source link)

ChainCatcher message, Web3 multi-chain wallet BitKeep has called out the hackers who previously attacked BitKeep Swap through on-chain messages, urging the hackers and imitation arbitrageurs to respond and return the stolen funds within 24 hours. It is understood that, with the support of security agencies and business partners, BitKeep has obtained key identity information about the hackers. Previously, a public letter was issued requesting the hackers and imitation arbitrageurs to negotiate the return of the stolen funds, offering 5% of the stolen funds as a vulnerability bounty/refund reward; otherwise, they will assist and join the affected users in legal action.According to previous reports, on October 18, BitKeep Swap was attacked by hackers, and BitKeep immediately announced full compensation and collaborated with security agencies such as SlowMist for security upgrades. It is reported that regarding the compensation work, all users except for a very few who have not claimed compensation have completed the compensation; the security upgrade of BitKeep Swap is ongoing, and the Swap function on BNB Chain has now been restored.

Chain Catcher news reports that the decentralized trading protocol Transit Swap has announced the latest developments regarding the theft incident, stating that it is willing to bear 100% of the losses incurred by users. On October 7, it will first refund the assets returned by the hacker to the users. Users can check and claim the website that has now been published, and the refund plan for the remaining assets will be announced in subsequent announcements.At the same time, Transit Swap officials further stated that they hope all hackers, attack imitators, and front-running arbitrageurs involved in the incident will engage in friendly negotiations based on the vulnerability bounty and refund rewards (5% of the relevant amount) and return the remaining assets to users. Previously, the project had stated that the hacker who stole the largest amount had returned over $18.9 million of the stolen funds, accounting for more than 80% of the amount stolen, which is about 65% of the total stolen amount.As of October 8, 2022, Transit Swap officials will consider hackers, attack imitators, and front-running arbitrageurs who have not returned user assets as attackers and will assist affected users in initiating relevant legal procedures, seeking intervention from law enforcement agencies until the attackers are found and all stolen funds are recovered.