All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 15:15, 27 January 2023 Azoundria talk contribs created page Curve Bribe Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/curvebribeexploit.php}} thumb|Curve FinanceThe Curve Bribe utility allows bribing Curve holders to vote a certain way in the decentralized governance protocol. The assets were stored in a smart contract hot wallet, and this was breachable. A white hack was performed to extract the funds, which were put in a new contract. This is a global/international case not involving...")
• 15:15, 27 January 2023 Azoundria talk contribs created page Ref Finance Logic Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/reffinancelogicerror.php}} thumb|Ref FinanceRef Finance offers a variety of products and services on the NEAR protocol. After releasing a "hotfix" to their protocol, a vulnerability was introduced which allowed for the theft of a significant amount of NEAR and REF tokens from their smart contract hot wallet. The REF token was forked to eliminate the stolen tokens, and the N...")
• 15:15, 27 January 2023 Azoundria talk contribs created page File:Reffinance.jpg
• 15:15, 27 January 2023 Azoundria talk contribs uploaded File:Reffinance.jpg
• 15:15, 27 January 2023 Azoundria talk contribs created page Pixel-Track Hex Tokens Stolen (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/pixeltrackhextokensstolen.php}} thumb|MetaMaskReddit user Pixel-Track introduces themselves as someone from an older generation who is not experienced with cryptocurrency. They reported that they did not share their seed phrase or private key with anyone, however they were attempting to stake their HEX tokens and this was not successful. They report that their funds were take...")
• 15:14, 27 January 2023 Azoundria talk contribs created page Dao Maker Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/daomakerexploit.php}} thumb|Dao MakerDAO Maker offers a comprehensive suite of DeFi products. One of the admin keys was exploited, in order to steal the funds of users stored in the platform. Ultimately, the team came up with a recovery plan for all affected users, and also restructured the smart contract such that no funds were under their custody, eliminating the centraliz...")
• 15:14, 27 January 2023 Azoundria talk contribs created page File:Daomaker.jpg
• 15:14, 27 January 2023 Azoundria talk contribs uploaded File:Daomaker.jpg
• 15:14, 27 January 2023 Azoundria talk contribs created page Shazbot /Yoda NFT Wallet Compromised (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/shazbotyodanftwalletcompromised.php}} thumb|MetaMaskAn NFT collector who goes by the name Yoda was tricked into revealing their private key seed phrase via a discord scam. While they didn't click "Next", the key was still entered into a live website. A significant quantity of NFTs were taken, however this was less than half of the NFTs present in their account at the time. Th...")
• 15:14, 27 January 2023 Azoundria talk contribs created page Poly Network Validation Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/polynetworkvalidationerror.php}} thumb|Poly NetworkThe Poly Network allows different smart chains to interact with one another securely. However, it contained a vulnerability which allowed funds to be removed. A hacker exploited the vulnerability, messed up their transactions such that their identity became known, and then proceeded to return the funds in exchange for a $5...")
• 15:13, 27 January 2023 Azoundria talk contribs created page File:Polynetwork.jpg
• 15:13, 27 January 2023 Azoundria talk contribs uploaded File:Polynetwork.jpg
• 15:13, 27 January 2023 Azoundria talk contribs created page Punk Protocol Reinitialized (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/punkprotocolreinitialized.php}} thumb|Punk ProtocolThe Punk Protocol is a decentralized annuity protocol, which allows investors to contribute and pays out periodic regular cash flows. All funds were stored in a smart contract hot wallet. A malicious hacker found an exploit, allowing them to reinitialize the smart contract hot wallet. However, while their transaction sat...")
• 15:13, 27 January 2023 Azoundria talk contribs created page File:Punkprotocol.jpg
• 15:13, 27 January 2023 Azoundria talk contribs uploaded File:Punkprotocol.jpg
• 15:13, 27 January 2023 Azoundria talk contribs created page Zerogoki Price Oracle Compromised (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/zerogokipriceoraclecompromised.php}} thumb|ZerogokiThe Zerogoki project is an experimental leveraged token trading platform. An attacker was able to somehow craft a compromised price oracle, which according to analysis shows that it was signed by valid keys. It is unclear how the attacker was able to sign a valid transaction. The most likely scenario would be that all keys we...")
• 15:12, 27 January 2023 Azoundria talk contribs created page File:Zerogoki.jpg
• 15:12, 27 January 2023 Azoundria talk contribs uploaded File:Zerogoki.jpg
• 15:12, 27 January 2023 Azoundria talk contribs created page OpenSea Fraudulent NFT Listing (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseafraudulentnftlisting.php}} thumb|OpenSeaIn August 2021, a fraudulent listing on the OpenSea NFT marketplace attracted more than 40 buyers of fake 24px cats NFTs. There is no way for those affected to recover their assets. This is a global/international case not involving a specific country. == About OpenSea == "The world’s first and largest digital marketplace for c...")
• 15:12, 27 January 2023 Azoundria talk contribs created page File:Opensea.jpg
• 15:12, 27 January 2023 Azoundria talk contribs uploaded File:Opensea.jpg
• 15:11, 27 January 2023 Azoundria talk contribs created page Casper DeFi Malicious Backdoor Mint (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/casperdefimaliciousbackdoormint.php}} thumb|Casper DeFiCasper Defi launched a simple investing platform where all funds can be stored in a smart contract hot wallet. One of their developers who made the contract added a backdoor durign the migration. This gave him the ability to mint tokens, which he used to drain all the stored liquidity. Since he had worked as a develope...")
• 15:11, 27 January 2023 Azoundria talk contribs created page File:Casperdefi.jpg
• 15:11, 27 January 2023 Azoundria talk contribs uploaded File:Casperdefi.jpg
• 15:11, 27 January 2023 Azoundria talk contribs created page Wault Finance Stablecoin Peg Logic Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/waultfinancestablecoinpeglogicerror.php}} thumb|Wault FinanceWault Finance offers a financial service which included a stablecoin. Liquidity was backed by funds in a smart contract hot wallet. Through flash loans and price manipulation, an attacker was able to remove liquidity, with the announcement of the hack triggering a price crash. No user funds were lost in the att...")
• 15:11, 27 January 2023 Azoundria talk contribs created page File:Waultfinance.jpg
• 15:11, 27 January 2023 Azoundria talk contribs uploaded File:Waultfinance.jpg
• 15:10, 27 January 2023 Azoundria talk contribs created page BSV 51% Attack Repelled (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bsv51attackrepelled.php}} thumb|Bitcoin AssociationThe bitcoin SV blockchain underwent a reorganization, when a hacker was able to gain more computational power than the rest of the network. The Bitcoin Association acted by requesting all node operators to discard the longer chain, which created a period of confusion where different nodes were mining different chain...")
• 15:10, 27 January 2023 Azoundria talk contribs created page Popsicle Finance Reward Calculation Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/popsiclefinancerewardcalculationerror.php}} thumb|Popsicle FinancePopsicle Finance is another automated market maker where investors can provide liquidity into a smart contract hot wallet. A hacker was able to trick the smart contract into paying out more funds than it should have. The hacker was successful at escaping with their funds. Popsicle Finance is in the proc...")
• 15:10, 27 January 2023 Azoundria talk contribs created page File:Popsiclefinance.jpg
• 15:10, 27 January 2023 Azoundria talk contribs uploaded File:Popsiclefinance.jpg
• 15:09, 27 January 2023 Azoundria talk contribs created page Levyathan Private Key Leak (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/levyathanprivatekeyleak.php}} thumb|LevyathanLevyathan provided a simple investment platform where users could invest in a basket of different assets they selected. The only catch was that the token was managed in a smart contract hot wallet, with unlimited minting available to a single operator. The private key for that operator was breached due to them publishing it onlin...")
• 15:09, 27 January 2023 Azoundria talk contribs created page File:Levyathan.jpg
• 15:09, 27 January 2023 Azoundria talk contribs uploaded File:Levyathan.jpg
• 15:09, 27 January 2023 Azoundria talk contribs created page Another Bitcoin Trader Theft (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/anotherbitcointradertheft.php}} Very few details are available about this theft. The victim was attempting to purchase bitcoin with a large amount of cash in Hong Kong. He was attacked with a knife and his cash was taken. There is no indication that any of the funds were recovered of the theif caught. This exchange or platform is based in Hong Kong, or the incident targeted people primarily in Ho...")
• 15:09, 27 January 2023 Azoundria talk contribs created page Castleswap Finance Ready For Rug Pull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/castleswapfinancereadyforrugpull.php}} thumb|Castleswap FinanceIt appears that this smart contract is ready to take user funds, containing deliberate exploits. This is a global/international case not involving a specific country. == About Castleswap Finance == "Yield Farming Castle for Knights of BSC." "Stake LP tokens to earn Castle. Deposit Fee will be used to buybac...")
• 15:08, 27 January 2023 Azoundria talk contribs created page File:Castlefinance.jpg
• 15:08, 27 January 2023 Azoundria talk contribs uploaded File:Castlefinance.jpg
• 15:08, 27 January 2023 Azoundria talk contribs created page PolyYeld Finance xYeld Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/polyyeldfinancexyeldexploit.php}} thumb|PolyYeld FinancePolyYeld Finance allowed participation in staking and liquidity pools, with funds in a smart contract hot wallet. The particular implementation depended on a second smart contract called the MasterChef, which was not designed to handle deflationary tokens. As a result, the pool was exploited and a massive amount of the n...")
• 15:08, 27 January 2023 Azoundria talk contribs created page File:Polyyeld.jpg
• 15:08, 27 January 2023 Azoundria talk contribs uploaded File:Polyyeld.jpg
• 15:07, 27 January 2023 Azoundria talk contribs created page ThorChain Origin Flaw Airdrop Scam (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/thorchainoriginflawairdropscam.php}} thumb|ThorChainThe ThorChain smart contract used tx.origin to validate that a transfer of RUNE tokens originated from the right wallet. However, if the user interacted with another smart contract, which performed the transfer, the tx.origin would originate from them, and the transaction would go through as though they had sent it. A mali...")
• 15:07, 27 January 2023 Azoundria talk contribs created page ThorChain ETH Router Flaw (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/thorchainethrouterflaw.php}} thumb|ThorChainThorChain is a decentralized protocol for swapping assets between blockchains. As part of this protocol, a large number of tokens are stored in smart contract hot wallets. The protocol contained multiple vulnerabilities, including an issue where the attacker was able to create a malicious router, which could be used to fake the dep...")
• 15:07, 27 January 2023 Azoundria talk contribs created page Coinskale Dogecoin Staking Scam Website Tradegrow (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinskaledogecoinstakingscamwebsitetradegrow.php}} Dogecoin is a Proof of Work coin which has discussed transitioning to Proof of Stake. Under a Proof of Stake model, assets can be staked to get a return. Reddit user Tradegrow reports they were tricked into signing up for a fraudulent dogecoin staking website called CoinSkale, which promised 7.4% interest. They sent 74k dogecoin with an approximat...")
• 15:07, 27 January 2023 Azoundria talk contribs created page Sanshu Inu Deflation Flaw (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sanshuinudeflationflaw.php}} thumb|Sanshu InuSanshu Inu is a deflationary token operating exchangeable via a smart contract, which features a hot wallet liquidity pool. Despite a security audit being performed, there was still an error in the implementation of this pool which allowed an attacker to drain all the funds. One of the lead developers has intent to make all affec...")
• 15:07, 27 January 2023 Azoundria talk contribs created page File:Sanshuinu.jpg
• 15:07, 27 January 2023 Azoundria talk contribs uploaded File:Sanshuinu.jpg
• 15:06, 27 January 2023 Azoundria talk contribs created page TrustWallet Twitter Phishing Attack @dafimaniac0 (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/trustwallettwitterphishingattack@dafimaniac0.php}} thumb|TrustWalletTwitter user @dafimaniac0 reports that they lost $90,689.000248 USDT and $154,807.136786 USDC in a phishing attack with transactions appearing on July 19th, 2021. While the original tweets are long gone, the transactions remain permanently on the blockchain. It doesn't appear that any of their several twee...")
• 15:06, 27 January 2023 Azoundria talk contribs created page File:Trustwallet.jpg
• 15:06, 27 January 2023 Azoundria talk contribs uploaded File:Trustwallet.jpg