All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 15:14, 27 January 2023 Azoundria talk contribs created page Poly Network Validation Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/polynetworkvalidationerror.php}} thumb|Poly NetworkThe Poly Network allows different smart chains to interact with one another securely. However, it contained a vulnerability which allowed funds to be removed. A hacker exploited the vulnerability, messed up their transactions such that their identity became known, and then proceeded to return the funds in exchange for a $5...")
• 15:13, 27 January 2023 Azoundria talk contribs created page File:Polynetwork.jpg
• 15:13, 27 January 2023 Azoundria talk contribs uploaded File:Polynetwork.jpg
• 15:13, 27 January 2023 Azoundria talk contribs created page Punk Protocol Reinitialized (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/punkprotocolreinitialized.php}} thumb|Punk ProtocolThe Punk Protocol is a decentralized annuity protocol, which allows investors to contribute and pays out periodic regular cash flows. All funds were stored in a smart contract hot wallet. A malicious hacker found an exploit, allowing them to reinitialize the smart contract hot wallet. However, while their transaction sat...")
• 15:13, 27 January 2023 Azoundria talk contribs created page File:Punkprotocol.jpg
• 15:13, 27 January 2023 Azoundria talk contribs uploaded File:Punkprotocol.jpg
• 15:13, 27 January 2023 Azoundria talk contribs created page Zerogoki Price Oracle Compromised (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/zerogokipriceoraclecompromised.php}} thumb|ZerogokiThe Zerogoki project is an experimental leveraged token trading platform. An attacker was able to somehow craft a compromised price oracle, which according to analysis shows that it was signed by valid keys. It is unclear how the attacker was able to sign a valid transaction. The most likely scenario would be that all keys we...")
• 15:12, 27 January 2023 Azoundria talk contribs created page File:Zerogoki.jpg
• 15:12, 27 January 2023 Azoundria talk contribs uploaded File:Zerogoki.jpg
• 15:12, 27 January 2023 Azoundria talk contribs created page OpenSea Fraudulent NFT Listing (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseafraudulentnftlisting.php}} thumb|OpenSeaIn August 2021, a fraudulent listing on the OpenSea NFT marketplace attracted more than 40 buyers of fake 24px cats NFTs. There is no way for those affected to recover their assets. This is a global/international case not involving a specific country. == About OpenSea == "The world’s first and largest digital marketplace for c...")
• 15:12, 27 January 2023 Azoundria talk contribs created page File:Opensea.jpg
• 15:12, 27 January 2023 Azoundria talk contribs uploaded File:Opensea.jpg
• 15:11, 27 January 2023 Azoundria talk contribs created page Casper DeFi Malicious Backdoor Mint (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/casperdefimaliciousbackdoormint.php}} thumb|Casper DeFiCasper Defi launched a simple investing platform where all funds can be stored in a smart contract hot wallet. One of their developers who made the contract added a backdoor durign the migration. This gave him the ability to mint tokens, which he used to drain all the stored liquidity. Since he had worked as a develope...")
• 15:11, 27 January 2023 Azoundria talk contribs created page File:Casperdefi.jpg
• 15:11, 27 January 2023 Azoundria talk contribs uploaded File:Casperdefi.jpg
• 15:11, 27 January 2023 Azoundria talk contribs created page Wault Finance Stablecoin Peg Logic Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/waultfinancestablecoinpeglogicerror.php}} thumb|Wault FinanceWault Finance offers a financial service which included a stablecoin. Liquidity was backed by funds in a smart contract hot wallet. Through flash loans and price manipulation, an attacker was able to remove liquidity, with the announcement of the hack triggering a price crash. No user funds were lost in the att...")
• 15:11, 27 January 2023 Azoundria talk contribs created page File:Waultfinance.jpg
• 15:11, 27 January 2023 Azoundria talk contribs uploaded File:Waultfinance.jpg
• 15:10, 27 January 2023 Azoundria talk contribs created page BSV 51% Attack Repelled (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bsv51attackrepelled.php}} thumb|Bitcoin AssociationThe bitcoin SV blockchain underwent a reorganization, when a hacker was able to gain more computational power than the rest of the network. The Bitcoin Association acted by requesting all node operators to discard the longer chain, which created a period of confusion where different nodes were mining different chain...")
• 15:10, 27 January 2023 Azoundria talk contribs created page Popsicle Finance Reward Calculation Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/popsiclefinancerewardcalculationerror.php}} thumb|Popsicle FinancePopsicle Finance is another automated market maker where investors can provide liquidity into a smart contract hot wallet. A hacker was able to trick the smart contract into paying out more funds than it should have. The hacker was successful at escaping with their funds. Popsicle Finance is in the proc...")
• 15:10, 27 January 2023 Azoundria talk contribs created page File:Popsiclefinance.jpg
• 15:10, 27 January 2023 Azoundria talk contribs uploaded File:Popsiclefinance.jpg
• 15:09, 27 January 2023 Azoundria talk contribs created page Levyathan Private Key Leak (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/levyathanprivatekeyleak.php}} thumb|LevyathanLevyathan provided a simple investment platform where users could invest in a basket of different assets they selected. The only catch was that the token was managed in a smart contract hot wallet, with unlimited minting available to a single operator. The private key for that operator was breached due to them publishing it onlin...")
• 15:09, 27 January 2023 Azoundria talk contribs created page File:Levyathan.jpg
• 15:09, 27 January 2023 Azoundria talk contribs uploaded File:Levyathan.jpg
• 15:09, 27 January 2023 Azoundria talk contribs created page Another Bitcoin Trader Theft (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/anotherbitcointradertheft.php}} Very few details are available about this theft. The victim was attempting to purchase bitcoin with a large amount of cash in Hong Kong. He was attacked with a knife and his cash was taken. There is no indication that any of the funds were recovered of the theif caught. This exchange or platform is based in Hong Kong, or the incident targeted people primarily in Ho...")
• 15:09, 27 January 2023 Azoundria talk contribs created page Castleswap Finance Ready For Rug Pull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/castleswapfinancereadyforrugpull.php}} thumb|Castleswap FinanceIt appears that this smart contract is ready to take user funds, containing deliberate exploits. This is a global/international case not involving a specific country. == About Castleswap Finance == "Yield Farming Castle for Knights of BSC." "Stake LP tokens to earn Castle. Deposit Fee will be used to buybac...")
• 15:08, 27 January 2023 Azoundria talk contribs created page File:Castlefinance.jpg
• 15:08, 27 January 2023 Azoundria talk contribs uploaded File:Castlefinance.jpg
• 15:08, 27 January 2023 Azoundria talk contribs created page PolyYeld Finance xYeld Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/polyyeldfinancexyeldexploit.php}} thumb|PolyYeld FinancePolyYeld Finance allowed participation in staking and liquidity pools, with funds in a smart contract hot wallet. The particular implementation depended on a second smart contract called the MasterChef, which was not designed to handle deflationary tokens. As a result, the pool was exploited and a massive amount of the n...")
• 15:08, 27 January 2023 Azoundria talk contribs created page File:Polyyeld.jpg
• 15:08, 27 January 2023 Azoundria talk contribs uploaded File:Polyyeld.jpg
• 15:07, 27 January 2023 Azoundria talk contribs created page ThorChain Origin Flaw Airdrop Scam (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/thorchainoriginflawairdropscam.php}} thumb|ThorChainThe ThorChain smart contract used tx.origin to validate that a transfer of RUNE tokens originated from the right wallet. However, if the user interacted with another smart contract, which performed the transfer, the tx.origin would originate from them, and the transaction would go through as though they had sent it. A mali...")
• 15:07, 27 January 2023 Azoundria talk contribs created page ThorChain ETH Router Flaw (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/thorchainethrouterflaw.php}} thumb|ThorChainThorChain is a decentralized protocol for swapping assets between blockchains. As part of this protocol, a large number of tokens are stored in smart contract hot wallets. The protocol contained multiple vulnerabilities, including an issue where the attacker was able to create a malicious router, which could be used to fake the dep...")
• 15:07, 27 January 2023 Azoundria talk contribs created page Coinskale Dogecoin Staking Scam Website Tradegrow (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinskaledogecoinstakingscamwebsitetradegrow.php}} Dogecoin is a Proof of Work coin which has discussed transitioning to Proof of Stake. Under a Proof of Stake model, assets can be staked to get a return. Reddit user Tradegrow reports they were tricked into signing up for a fraudulent dogecoin staking website called CoinSkale, which promised 7.4% interest. They sent 74k dogecoin with an approximat...")
• 15:07, 27 January 2023 Azoundria talk contribs created page Sanshu Inu Deflation Flaw (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sanshuinudeflationflaw.php}} thumb|Sanshu InuSanshu Inu is a deflationary token operating exchangeable via a smart contract, which features a hot wallet liquidity pool. Despite a security audit being performed, there was still an error in the implementation of this pool which allowed an attacker to drain all the funds. One of the lead developers has intent to make all affec...")
• 15:07, 27 January 2023 Azoundria talk contribs created page File:Sanshuinu.jpg
• 15:07, 27 January 2023 Azoundria talk contribs uploaded File:Sanshuinu.jpg
• 15:06, 27 January 2023 Azoundria talk contribs created page TrustWallet Twitter Phishing Attack @dafimaniac0 (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/trustwallettwitterphishingattack@dafimaniac0.php}} thumb|TrustWalletTwitter user @dafimaniac0 reports that they lost $90,689.000248 USDT and $154,807.136786 USDC in a phishing attack with transactions appearing on July 19th, 2021. While the original tweets are long gone, the transactions remain permanently on the blockchain. It doesn't appear that any of their several twee...")
• 15:06, 27 January 2023 Azoundria talk contribs created page File:Trustwallet.jpg
• 15:06, 27 January 2023 Azoundria talk contribs uploaded File:Trustwallet.jpg
• 15:06, 27 January 2023 Azoundria talk contribs created page Coinbase Unauthorized Bank Access (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinbaseunauthorizedbankaccess.php}} thumb|CoinbaseThe plaintiff reports that there was an unauthorized withdrawal from his bank account through the Coinbase platform. It's unclear if the ethereum was withdrawn from his account. The issue was not resolved through Coinbase, and as of November 2021 is being brought before the courts. This exchange or platform is based in Unite...")
• 15:05, 27 January 2023 Azoundria talk contribs created page Array Finance Price Calculation Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/arrayfinancepricecalculationerror.php}} thumb|Array FinanceArray Finance is an online investment platform, which included a large number of funds in a smart contract hot wallet. A vulnerability in that smart contract most likely allowed one of the team members to make off with the funds. The team has not provided any further information after their update on July 20th....")
• 15:05, 27 January 2023 Azoundria talk contribs created page File:Arrayfinance.jpg
• 15:05, 27 January 2023 Azoundria talk contribs uploaded File:Arrayfinance.jpg
• 15:05, 27 January 2023 Azoundria talk contribs created page Finiko Ponzi Scheme (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/finikoponzischeme.php}} thumb|FinikoFiniko created a platform where investors put up funds and received 1%/day in interest. The scheme grew to become one of the largest frauds in the world. Senior officials from the scheme are still in hiding, and it looks like investors will face significant losses. This exchange or platform is based in Russia, or the incident targeted people...")
• 15:05, 27 January 2023 Azoundria talk contribs created page File:Finiko.jpg
• 15:05, 27 January 2023 Azoundria talk contribs uploaded File:Finiko.jpg
• 15:04, 27 January 2023 Azoundria talk contribs created page PancakeBunny Reward Calculation Bug (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/pancakebunnyrewardcalculationbug.php}} thumb|PancakeBunnyPancakeBunny is a staking platform for crypto-assets. Hackers used the smart contract along with flash loans to manipulate prices, and made $2.4m in profit. The project has made an effort to reimburse investors and continues to operate. This is a global/international case not involving a specific country. == Abou...")
• 15:04, 27 January 2023 Azoundria talk contribs created page ThorChain Chaosnet Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/thorchainchaosnetexploit.php}} thumb|ThorChainThorChain is a new form of decentralized exchange. The ThorChain funds were stored in smart contract hot wallets, a small portion of which had recently been upgraded. The new contract unfortunately had a mistake which allowed the hacker to override the contract and steal funds from multiple protocols. This is a global/internatio...")