All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 21:50, 27 January 2023 Azoundria talk contribs created page Indexed Finance Pools Emptied (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/indexedfinancepoolsemptied.php}} thumb|Indexed FinanceThe Indexed Finance liquidity pools (smart contract hot wallets) were exploited to drain $16m. Despite being suspected as identified, the attacker did not return the funds. The team has put together an incentive plan which aims to recover the majority of the funds over time in the future. This is a global/internatio...")
• 21:50, 27 January 2023 Azoundria talk contribs created page File:Indexedfinance.jpg
• 21:50, 27 January 2023 Azoundria talk contribs uploaded File:Indexedfinance.jpg
• 21:50, 27 January 2023 Azoundria talk contribs created page Karura Parachain Lost Tokens (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/karuraparachainlosttokens.php}} thumb|KaruraThe unaudited Karura smart contract contained an exploit which the team hadn't noticed. This was exploited in an attempt to take the funds. The attacker was too stupid to move the funds or negotiate a bounty, and kept them in the same wallet while the Karura governance system put through a proposal for them to be taken back to the tre...")
• 21:50, 27 January 2023 Azoundria talk contribs created page File:Karura.jpg
• 21:50, 27 January 2023 Azoundria talk contribs uploaded File:Karura.jpg
• 21:49, 27 January 2023 Azoundria talk contribs created page CoinMarketCap Database Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinmarketcapdatabasebreach.php}} thumb|CoinMarketCapA list of 3.1M email addresses, with strong correlation to users registered on CoinMarketCap, was found online. CoinMarketCap claims that the list must have come from an alternate source, and they were unable to find a breach on their servers. However, no complete alternative hypothesis has been brought forth. No passw...")
• 21:49, 27 January 2023 Azoundria talk contribs created page File:Coinmarketcap.jpg
• 21:49, 27 January 2023 Azoundria talk contribs uploaded File:Coinmarketcap.jpg
• 21:49, 27 January 2023 Azoundria talk contribs created page Alpha Finance Copycat Rug Pull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/alphafinancecopycatrugpull.php}} thumb|Alpha FinanceAlpha Finance is a DAO which allows users to gain exposure to different projects by holding and staking their ALPHA token. Scammers created a different project with a very similar name on the Avalanche blockchain. The smart contract had a backdoor which allowed any invested funds to be taken. It is unknown how much was l...")
• 21:49, 27 January 2023 Azoundria talk contribs created page DxDex Airdrop Phishing Campaign (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/dxdexairdropphishingcampaign.php}} thumb|DxDexMillions of users received airdropped tokens directly into their wallet. When attempting to transfer them, they are instructed that they need to first claim them on the DxDex website. Copying the website text and linking to a CoinTelegraph article about ExoniumDex, the DxDex appears to offer a promising new technology and establishes...")
• 21:49, 27 January 2023 Azoundria talk contribs created page File:Dxdex.jpg
• 21:49, 27 January 2023 Azoundria talk contribs uploaded File:Dxdex.jpg
• 21:48, 27 January 2023 Azoundria talk contribs created page Lido Finance Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lidofinancevulnerability.php}} thumb|Lido FinanceThe Lido Finance project discovered a vulnerability which placed up to 20,000 ETH of user funds at risk, however it was only possible to be executed through an existing trusted DAO participant. The project awarded a $100k bounty to the individual who found the vulnerability. This is a global/international case not involving...")
• 21:48, 27 January 2023 Azoundria talk contribs created page File:Lidofinance.jpg
• 21:48, 27 January 2023 Azoundria talk contribs uploaded File:Lidofinance.jpg
• 21:48, 27 January 2023 Azoundria talk contribs created page Ribbon Finance Sybil Attack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ribbonfinancesybilattack.php}} thumb|Ribbon FinanceRibbon Finance offered airdrop incentives, which were exploited through a Sybil attack to take a much larger reward than intended. The exploiter had a reputation to maintain and returned the funds without incident. This is a global/international case not involving a specific country. == About Ribbon Finance == "SUSTAIN...")
• 21:48, 27 January 2023 Azoundria talk contribs created page File:Ribbonfinance.jpg
• 21:48, 27 January 2023 Azoundria talk contribs uploaded File:Ribbonfinance.jpg
• 21:47, 27 January 2023 Azoundria talk contribs created page Evolved Apes Rug Pull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/evolvedapesrugpull.php}} thumb|Evolved ApesThe Evolved Apes NFTs were overseen by an anonymous individual, who didn't even pay the artist who made them. In addition to the NFTs, the development of a game was promised. After collecting the funds from various individuals around the world, they simply disappeared. The community has vowed to rebuild the project as Fight Back A...")
• 21:47, 27 January 2023 Azoundria talk contribs created page File:Evolvedapes.jpg
• 21:47, 27 January 2023 Azoundria talk contribs uploaded File:Evolvedapes.jpg
• 21:47, 27 January 2023 Azoundria talk contribs created page My Farm Pet Flash Loan Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/myfarmpetflashloanexploit.php}} thumb|My Farm PetMyFarmPet is a small virtual farm game which was attacked through a flash loan, giving a profit over $30k. The attack was not mentioned on the project Twitter page and they don't have a blog, however the price drop is highly visible on the price history. It is unknown the exact details of the exploit or if any compensation was...")
• 21:46, 27 January 2023 Azoundria talk contribs created page File:Myfarmpet.jpg
• 21:46, 27 January 2023 Azoundria talk contribs uploaded File:Myfarmpet.jpg
• 21:46, 27 January 2023 Azoundria talk contribs created page Polygon Double Spend Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/polygondoublespendvulnerability.php}} thumb|PolygonThe Polygon bridge allows users to cash funds from the Polygon side-chain back to Ethereum. As part of this mechanism, a smart contract hot wallet checks to see proof that the Polygon tokens are accurate. This smart contract hot wallet had a vulnerability where the same proof could be submitted up to 223 times, to withdraw 223...")
• 21:46, 27 January 2023 Azoundria talk contribs created page File:Polygon.jpg
• 21:46, 27 January 2023 Azoundria talk contribs uploaded File:Polygon.jpg
• 21:46, 27 January 2023 Azoundria talk contribs created page Oski Stealer Malware (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/oskistealermalware.php}} thumb|Oski StealerThe Oski Stealer is a malware which steals private information of the user, including crypto wallet details. It typically spreads by created targeted phishing attacks to trick the recipient into downloading an infected Microsoft Office file (such as PowerPoint). Once the file is downloaded, that installs malware which obtains data...")
• 21:46, 27 January 2023 Azoundria talk contribs created page File:Oskistealer.jpg
• 21:46, 27 January 2023 Azoundria talk contribs uploaded File:Oskistealer.jpg
• 21:45, 27 January 2023 Azoundria talk contribs created page Compound Incorrect Reward Calculation Bug (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/compoundincorrectrewardcalculationbug.php}} thumb|Compound FinanceCompound Finance reached unanymous support on a proposal to upgrade their smart contract to mint additional COMP tokens, which were considered to be unfair. They came up with a proposal that would break various smart contracts, before coming out with another to revert the damage. In the end, the majorit...")
• 21:45, 27 January 2023 Azoundria talk contribs created page Baller Ape Club Rug Pull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ballerapeclubrugpull.php}} thumb|Baller Ape ClubBaller Ape Club was an NFT project that promised to launch on October 1st, 2021. They claimed 5,000 unique assets along with significant perks would be included. Through a clever twist, they tricked users into submitting their payments multiple times by claiming that each payment had failed to go through, and gave users mul...")
• 21:45, 27 January 2023 Azoundria talk contribs created page File:Ballerapeclub.jpg
• 21:45, 27 January 2023 Azoundria talk contribs uploaded File:Ballerapeclub.jpg
• 21:45, 27 January 2023 Azoundria talk contribs created page Coinbase Ethereum Address Typo Miserable Earth5856 (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinbaseethereumaddresstypomiserableearth5856.php}} thumb|CoinbaseReddit user Miserable_Earth5856 reports sending 0.5 ETH to one of CoinBase's hot wallets directly, as opposed to sending the funds to their proper deposit address. Blockchain transactions are irreversible, however these funds were sent to a wallet actively operated by the CoinBase platform. Different Reddit us...")
• 21:44, 27 January 2023 Azoundria talk contribs created page AutoShark Finance Swap Mining Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/autosharkfinanceswapminingvulnerability.php}} thumb|AutoShark FinanceA user was incentivized to make a large trade on the AutoShark platform based on the rebate program, which contributed heavily to the market volatility. It's unclear if there was an overall loss of any investor funds. This is a global/international case not involving a specific country. == About AutoShark...")
• 21:44, 27 January 2023 Azoundria talk contribs created page Masad Clipper And Stealer Malware (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/masadclipperandstealermalware.php}} thumb|MasadMasad Clipper and Stealer is a new form of malware which can be obtained through a malicious download. The software can obtain inforamtion about installed cryptocurrency wallets and also modify addresses in the clipboard to intercept funds. This is a global/international case not involving a specific country. == About Masad...")
• 21:44, 27 January 2023 Azoundria talk contribs created page File:Masadstealer.jpg
• 21:44, 27 January 2023 Azoundria talk contribs uploaded File:Masadstealer.jpg
• 21:43, 27 January 2023 Azoundria talk contribs created page DeversiFI EIP-1559 EthereumJS Fee Bug (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/deversifieip1559ethereumjsfeebug.php}} thumb|DeversiFIA small number of users of the DiversiFi platform were faced with unexpectedly high Ethereum transaction fees, as a result of a bug in some JavaScript libraries. For most users, they could notice that these fees were too high, or displayed in funny HEX. Most users wouldn't be able to afford the outrageous fees unless they...")
• 21:42, 27 January 2023 Azoundria talk contribs created page Bitcoin.org Double Your Cash Scam (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bitcoinorgdoubleyourcashscam.php}} thumb|Bitcoin.orgBitcoin.org is a widely consulted reference on the bitcoin protocol and status. In September 2021, the site's DNS was redirected to a malicious server, which displayed a scam claiming to double people's money if they sent it to a particular donation address. While no post-mortem on the source of the breach was provided, do...")
• 21:42, 27 January 2023 Azoundria talk contribs created page File:Bitcoinorg.jpg
• 21:42, 27 January 2023 Azoundria talk contribs uploaded File:Bitcoinorg.jpg
• 21:42, 27 January 2023 Azoundria talk contribs created page Alpha Finance Phishing Site on Google (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/alphafinancephishingsiteongoogle.php}} thumb|Alpha FinanceAlpha Finance is a DAO which allows users to gain exposure to different projects by holding and staking their ALPHA token. Scammers created a fraudulent website with a very similar name, which was linked prominently as a Google ad. Once users would attempt to connect their wallet, they would be asked for a seed phr...")
• 21:42, 27 January 2023 Azoundria talk contribs created page File:Alphafinance.jpg
• 21:42, 27 January 2023 Azoundria talk contribs uploaded File:Alphafinance.jpg
• 21:42, 27 January 2023 Azoundria talk contribs created page Vee Finance Price Oracle Manipulation (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/veefinancepriceoraclemanipulation.php}} thumb|Vee FinanceVee Finance is a decentralized lending platform, which operates through a smart contract hot wallet. Through the creation of a fake token, the hot wallet was breached, and the funds were removed to the hacker. The Vee Finance team has since undertaken some efforts to retrieve the funds from the attacker, however there...")
• 21:41, 27 January 2023 Azoundria talk contribs created page File:Veefinance.jpg
• 21:41, 27 January 2023 Azoundria talk contribs uploaded File:Veefinance.jpg