$1 300 000 USD

JULY 2024

GLOBAL

MONOSWAP

DESCRIPTION OF EVENTS

"MonoSwap represents a meticulously crafted ecosystem-centric, yield-driven Decentralized Exchange (DEX) and Launchpad seamlessly integrated with the robust Blast framework.

 

Distinguished by its highly efficient and customizable protocol, MonoSwap provides builders and users alike with the unparalleled ability to harness our bespoke infrastructure, fostering deep, sustainable, and adaptable liquidity. Going beyond conventional DEX designs, MonoSwap stands out by offering a uniquely tailored approach that places a premium on composability, redefining the landscape of decentralized financial solutions."

 

"Blast ecosystem DEX MonoSwap disclosed on Twitter that the platform has been hacked. Users are advised not to add liquidity or stake. If you have any staking positions, please withdraw them immediately to avoid financial loss."

 

"Yesterday, one of our developers installed a phishing app to join a call with scammers who pretended to be a VC. The attackers installed the botnet into his office PC, which has access to all MonoSwap-related wallets and contracts. The hackers then withdrew most of the staked liquidity positions, causing damage to the protocol."

 

"The hacker has bridged the stolen funds from BLAST to Ethereum & already laundered 371 $ETH (worth ~$1.3 million) via #TornadoCash."

 

"ALERT: MonoSwap has been hacked. DO NOT add liquidity or stake in our farming pools at the moment.

 

If you have any staked positions, please withdraw immediately to avoid funds loss."

 

"We are investigating the attack right now and will soon announce the next moves. We were trying to work with VCs to build a better future for MonoSwap. However, unfortunate things happened and now we are trying our best to solve this issue."

 

"New contracts for our v2 + v3 AMMs were deployed and will be migrated to the UI in 48 hours.

 

We are working to deploy new contracts for Lottery, MonoChest, MonoPass, Dividends, MONO, and xMONO.

 

A snapshot was taken and users will receive newly deployed assets directly in their wallet. A detailed timeline will be published soon in our Discord.

 

For now, please withdraw all of your positions left on previous contracts.

 

We are having internal discussions on recovery plans for impacted users. Please stay tuned for more info in the coming time."

MonoSwap is a liquidity provider on the Blast smart chain. On or before July 24th, the team was approached by what was believed to be a venture capital fund to install Kakao Chat software for their meeting. Instead of legitimate meeting software, this software contrained malware that allowed the computer to be remotely controlled and exploited. This remote access was used to obtain private key information from the protocol, which was used to withdraw all funds. Funds were promptly converted and transfered to TornadoCash.

Sources And Further Reading

 For questions or enquiries, email info@quadrigainitiative.com.

Get Social

  • email
  • reddit
  • telegram
  • Twitter

© 2021 Quadriga Initiative. Your use of this site/service accepts the Terms of Use and Privacy Policy. This site is not associated with Ernst & Young, Miller Thompson, or the Official Committee of Affected Users. Hosted in Canada by HosterBox.