All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 11:31, 25 January 2023 Azoundria talk contribs created page Atomic Loans Close Call (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/atomicloansclosecall.php}} thumb|Atomic LoansAtomic Loans created a service where, rather than provide your funds to a central custodian, they could instead be provided to a hot wallet smart contract. Rather than trusting a human being, you would trust arbitrary open source code. Despite two separate security audits, the code still had vulnerabilities. Luckily, those vuln...")
• 11:31, 25 January 2023 Azoundria talk contribs created page File:Atomicloans.jpg
• 11:31, 25 January 2023 Azoundria talk contribs uploaded File:Atomicloans.jpg
• 11:30, 25 January 2023 Azoundria talk contribs created page DeFi Money Market Impersonated (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/defimoneymarketimpersonated.php}} thumb|DeFi Money MarketDefi Money Market launches a fundraiser token sale. Malicious actors impersonate the project and scam some participants via Twitter. The protocol then compensates the affected users. This exchange or platform is based in United States, or the incident targeted people primarily in United States. == About DeFi Mo...")
• 11:30, 25 January 2023 Azoundria talk contribs created page File:Defimoneymarket.jpg
• 11:30, 25 January 2023 Azoundria talk contribs uploaded File:Defimoneymarket.jpg
• 11:30, 25 January 2023 Azoundria talk contribs created page GPay/Cryptopoint/XtraderFX Shut Down (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/gpaycryptopointxtraderfxshutdown.php}} thumb|XtraderFXThe company performed a series of fraudulent and suspicious practices, including false testimonials of famous people, blocking withdrawals, and losing investor funds. In the end, the company was shut down by the court. This exchange or platform is based in United Kingdom, or the incident targeted people prima...")
• 11:30, 25 January 2023 Azoundria talk contribs created page File:Cryptopointxtraderfx.jpg
• 11:30, 25 January 2023 Azoundria talk contribs uploaded File:Cryptopointxtraderfx.jpg
• 11:30, 25 January 2023 Azoundria talk contribs created page VETHER V1 Blurr Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/vetherv1blurrexploit.php}} thumb|VetherVether was a stablecoin. This coin had a vulnerability which made the minting process confusing and unfair for different groups of users, which led to a protocol upgrade. This is a global/international case not involving a specific country. == About Vether == Vether is a "strictly-scarce Ethereum based asset." "Vether is designed to be a...")
• 11:29, 25 January 2023 Azoundria talk contribs created page File:Vether.jpg
• 11:29, 25 January 2023 Azoundria talk contribs uploaded File:Vether.jpg
• 11:29, 25 January 2023 Azoundria talk contribs created page DeFi Saver Exchange Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/defisaverexchangevulnerability.php}} thumb|DeFi SaverThere was a vulnerability in the DefiSaver smart contract. Some funds were under risk, however they were captured and returned through a whitehat hack. This is a global/international case not involving a specific country. == About DeFi Saver == "DeFi Saver is a one-stop dashboard for creating, managing and tracking your...")
• 11:29, 25 January 2023 Azoundria talk contribs created page File:Defisaver.jpg
• 11:29, 25 January 2023 Azoundria talk contribs uploaded File:Defisaver.jpg
• 11:29, 25 January 2023 Azoundria talk contribs created page Argent Recovery Without Guardians (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/argentrecoverywithoutguardians.php}} thumb|ArgentArgent allowed users to set up their wallet to have "guardians" who could assist in recovery. By default, there were no guardians set up. If a user didn't set up guardians, then anyone could take their funds. The issue wasn't exploited because there was a 36 hour cooldown and the problem was quickly identified. This is a globa...")
• 11:29, 25 January 2023 Azoundria talk contribs created page File:Argent.jpg
• 11:29, 25 January 2023 Azoundria talk contribs uploaded File:Argent.jpg
• 11:28, 25 January 2023 Azoundria talk contribs created page Private Key Brute Forced With Only 8 Words (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/privatekeybruteforcedwithonly8words.php}} Twitter user Alistair Milne launched a contest where he would unveil one word of a 12-word seed phrase periodically over a month. The wallet contained a whole bitcoin. John Cantrell was able to brute force the seed phrase with only 8 of the words, extracting the funds prematurely before the last 4 words were unveiled. Ultimately, John was declared the winn...")
• 11:28, 25 January 2023 Azoundria talk contribs created page Ledger Shopify Data Breach 2 (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ledgershopifydatabreach2.php}} thumb|LedgerShopify assisted Ledger in processing orders for hardware wallets. Ledger's Shopify records were reportedly breached in two incidents on April 18th, 2020 and again on June 16th, 2020. A total of 20,000 records were reportedly breached, with contact information of customers who had ordered Ledger products. The information was sold on th...")
• 11:28, 25 January 2023 Azoundria talk contribs created page HTS Coin Shuts Down (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/htscoinshutsdown.php}} thumb|HTS CoinHTS Coin was a cryptocurrency exchange platform in South Korea. Upon suspicion of employees embezzling customer funds (including the CEO), the platform was shut down by authorities. It's unclear the specific evidence and outcome, however the exchange appears to have insisted they are fully backed and honoured withdrawals. This exchange or...")
• 11:28, 25 January 2023 Azoundria talk contribs created page File:Htscoin.jpg
• 11:28, 25 January 2023 Azoundria talk contribs uploaded File:Htscoin.jpg
• 11:27, 25 January 2023 Azoundria talk contribs created page Uniswap Fake Balancer Token (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/uniswapfakebalancertoken.php}} thumb|UniswapUniswap allows anyone to list a token. Therefore, there have been a massive number of scams with tokens named similarly to popular tokens. While Balancer Labs later got a token, they didn't yet have one at this stage. There was still a reasonable chance someone may have looked for one, and ended up purchasing from a scammer. This is...")
• 11:27, 25 January 2023 Azoundria talk contribs created page MiningPoolHub Ethereum Theft (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/miningpoolhubethereumtheft.php}} thumb|MiningPoolHubMiningPoolHub is a service which allows you to optimize your mining among different alt coins. On June 11th, 2020, a suspicious transaction was detected which removed 3,221 ETH ($746k USD) for a mining fee of 2310 ETH ($535k USD). 2079 ETH ($482k USD) were returned by F2Pool. It is unclear if any of these funds were use...")
• 11:27, 25 January 2023 Azoundria talk contribs created page File:Miningpoolhub.jpg
• 11:27, 25 January 2023 Azoundria talk contribs uploaded File:Miningpoolhub.jpg
• 11:27, 25 January 2023 Azoundria talk contribs created page HyperCapital Ponzi Scheme (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/hypercapitalponzischeme.php}} thumb|HyperCapitalThe HyperCapital was a multi-level marketing scheme without any product or service. The scheme ultimately collapsed in mid-2020 and was replaced with HyperFund. It is unknown how much money was invested and lost in the scheme. This is a global/international case not involving a specific country. == About HyperCapital == "Hype...")
• 11:27, 25 January 2023 Azoundria talk contribs created page File:Hyperfund.jpg
• 11:27, 25 January 2023 Azoundria talk contribs uploaded File:Hyperfund.jpg
• 11:26, 25 January 2023 Azoundria talk contribs created page Good Cycle Ponzi Blackmailed (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/goodcycleponziblackmailed.php}} thumb|Good CycleGood Cycle was a peer-to-peer cryptocurrency exchange based in South Korea. The platform appeared to be operating a ponzi scheme on the side. The website had notably weak security. According to official reports, hackers blackmailed the operators of the website to send them money. When they refused, they exploited the website t...")
• 11:26, 25 January 2023 Azoundria talk contribs created page File:Goodcycle.jpg
• 11:26, 25 January 2023 Azoundria talk contribs uploaded File:Goodcycle.jpg
• 11:26, 25 January 2023 Azoundria talk contribs created page DeversiFi Launch Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/deversifilaunchexploit.php}} thumb|DeversiFiThe first version of the DiversiFi platform imposed an order limit, however when a transaction failed it would be retried automatically. This resulted in a degredation to the speed with which other orders were processed. There don't appear to have been any funds lost. DeversiFi has since rebranded their project as Rhino Finance. T...")
• 11:26, 25 January 2023 Azoundria talk contribs created page File:Deversifi.jpg
• 11:26, 25 January 2023 Azoundria talk contribs uploaded File:Deversifi.jpg
• 11:25, 25 January 2023 Azoundria talk contribs created page Amfeix Ponzi Scheme (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/amfeixponzischeme.php}} thumb|AmfeixAmfeix was a platform where investors would invest their funds, promising a large rate around 8%/mo. The owners behind the scheme were not fully known. The fun ran successfully from around June 2019 up until withdrawals started failing in May 2020. Platform channels were shut down approximately June 1st, 2020 with over 500 pending withdrawals...")
• 11:25, 25 January 2023 Azoundria talk contribs created page File:Amfeix.jpg
• 11:25, 25 January 2023 Azoundria talk contribs uploaded File:Amfeix.jpg
• 11:25, 25 January 2023 Azoundria talk contribs created page Ledger Google Play Phishing Alert (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ledgergoogleplayphishingalert.php}} thumb|LedgerA fake Ledger Live application was launched on Google Play in May 2020. At the same time, the attackers created a large number of fake reviews with a low rating on the legitimate Ledger Live application. This created a situation where it was easy to fool users into downloading the wrong application, which would request their seed...")
• 11:25, 25 January 2023 Azoundria talk contribs created page LMEX Stock Exchange (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lmexstockexchange.php}} Although there is very limited information to be found on this case, it appears that the LMEX exchange had a vulnerability which allowed attackers to remove the funds. After losing $150k USD, the platform shut down and declared themselves insolvent. This exchange or platform is based in China, or the incident targeted people primarily in China. == About LMEX == "The LMEX...")
• 11:25, 25 January 2023 Azoundria talk contribs created page Hegic Options Arbitraged (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/hegicoptionsarbitraged.php}} thumb|Hegic Exchange Hegic Exchange had an options service, which ran through a smart contract hot wallet and had an issue where newer liquidity providers missed out on potential upside, which earlier liquidity providers could capitalize on. It was estimated that $3k worth of additional profits were exploited before the protocol was upgraded....")
• 11:24, 25 January 2023 Azoundria talk contribs created page ShapeShift Insider Theft (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/shapeshiftinsidertheft.php}} thumb|ShapeShiftShapeShift operates a non-custodial crypto swap service, which allows the transfer of funds from one blockchain to another. As part of this service, the company maintains large hot wallets. One software developer, Azamat Mukhidinov, was effectively given access to the wallet through his role. Through clever manipulation and a lac...")
• 11:24, 25 January 2023 Azoundria talk contribs created page KeepKey Wallet Side Channels (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/keepkeywalletsidechannels.php}} thumb|KeepKeyEarly versions of the KeepKey hardware wallet firmware were vulnerable to side channel extraction of the PIN information. Basically, different pins present a different voltage profile when performing verification, and sophisticated attackers with physical access to the device could use that to determine the set pin. The firmware was...")
• 11:24, 25 January 2023 Azoundria talk contribs created page Bitcoin Backed tBTC Stuck (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bitcoinbackedtbtcstuck.php}} thumb|TBTCTBTC was intended to be an ethereum token matching the price of BTC. Unlike the primary wBTC (wrapped bitcoin) competitor, there was intended to be no central redemption party, and instead the system would operate in a decentralized manner with extra ethereum used as collateral. Unfortunately the first version of the protocol had an issue wi...")
• 11:24, 25 January 2023 Azoundria talk contribs created page File:Tbtc.jpg
• 11:24, 25 January 2023 Azoundria talk contribs uploaded File:Tbtc.jpg
• 11:24, 25 January 2023 Azoundria talk contribs created page Coinbase/AT&T Account Sim Swap signalme (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinbaseat&taccountsimswapsignalme.php}} thumb|CoinbaseReddit user signalme was a customer of both Coinbase and AT&T. They used SMS-based two-factor authentication to secure their Coinbase account, and had a bank account with $3,500 hooked up to their account. Their AT&T account was secured with the highest level of security available at the time, which is a note that require...")
• 11:23, 25 January 2023 Azoundria talk contribs created page Ledger Shopify Data Breach 1 (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ledgershopifydatabreach1.php}} thumb|LedgerShopify assisted Ledger in processing orders for hardware wallets. Ledger's Shopify records were reportedly breached in two incidents on April 18th, 2020 and again on June 16th, 2020. A total of 20,000 records were reportedly breached, with contact information of customers who had ordered Ledger products. The information was sold on th...")
• 11:23, 25 January 2023 Azoundria talk contribs created page Loopring Design Defect (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/loopringdesigndefect.php}} thumb|LoopringLoopring is a decentralized trading platform. The Loopring protocol involves keys to manage transactions. These keys were based on password input provided by the user, which often had a low entropy and was poorly protected. As a result, it was possible for an attacker to interfere with ongoing trades or create unintended trades. The...")