All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 10:51, 28 January 2023 Azoundria talk contribs uploaded File:Arivadigital.jpg
• 10:51, 28 January 2023 Azoundria talk contribs created page Lana Rhoades Alleged Rug Pull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lanarhoadesallegedrugpull.php}} thumb|OpenSeaLana Rhoades created her own brand of NFT, and made promises to investors online. The market uptake of her NFTs was less than predicted, and investors started to complain after Lana Rhoades liquidated $1.5m, apparently to pay her team. Some even accused her of scamming them, including influential Coffeezilla. Following this, Lan...")
• 10:51, 28 January 2023 Azoundria talk contribs created page File:Lanarhoades.jpg
• 10:51, 28 January 2023 Azoundria talk contribs uploaded File:Lanarhoades.jpg
• 10:50, 28 January 2023 Azoundria talk contribs created page Flurry Finance Vault Flash Loan Attack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/flurryfinancevaultflashloanattack.php}} thumb|Flurry FinanceFlurry Finance is a yield farming protocol which offers a stablecoin with interest. An attacker was able to exploit the smart contract hot wallet and removed between $251,000 and $293,000 USD worth of funds by increasing their token balance using a Flash loan. The protocol has vowed to reimburse all affected use...")
• 10:50, 28 January 2023 Azoundria talk contribs created page File:Flurryfinance.jpg
• 10:50, 28 January 2023 Azoundria talk contribs uploaded File:Flurryfinance.jpg
• 10:50, 28 January 2023 Azoundria talk contribs created page Compound Finance Live Critical Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/compoundfinancelivecriticalvulnerability.php}} thumb|Compound FinanceCompound Finance is a protocol which allows for decentralized lending. It operates with 18 separate markets including TrueUSD. A critical vulnerability was discovered during an audit. A public function can be used to sweep tokens accidentally sent to the smart contract, however this could also be used...")
• 10:50, 28 January 2023 Azoundria talk contribs created page OpenSea Phishing Attack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseaphishingattack.php}} thumb|OpenSeaMultiple users on the OpenSea platform were the subject of a phishing attack, from an unknown vector. OpenSea is still investigating, and hasn't been able to determine the cause. It is reported that some of the NFT tokens were returned by the attacker, while others were sold, and the proceeds mixed through TornadoCash. This is a global...")
• 10:49, 28 January 2023 Azoundria talk contribs created page Gold Mine Finance Scam (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/goldminefinancescam.php}} Gold Mine Finance was a new protocol on the Fantom blockchain, a fork of Tomb Finance. There were no documents or website for the fork. It was promoted solely on Twitter and some listing sites. The smart contract hot wallet had a clever vulnerability present to enable the removal of liquidity. Although $800k of liquidity was originally present in the protocol, $700k was r...")
• 10:49, 28 January 2023 Azoundria talk contribs created page RigoBlock Missing Access Controls (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/rigoblockmissingaccesscontrols.php}} thumb|RigoBlockRigoBlock had an exploit on their smart contract hot wallet, where the access controls had not been set up properly. The protocol was exploited and 160.86 ETH was taken. The attacker later returned 90% of the funds, keeping the remaining 10% as a bounty. The returned funds are anticipated to be redistributed to affected use...")
• 10:49, 28 January 2023 Azoundria talk contribs created page File:Rigoblock.jpg
• 10:49, 28 January 2023 Azoundria talk contribs uploaded File:Rigoblock.jpg
• 10:49, 28 January 2023 Azoundria talk contribs created page TopGoal Hot Wallet Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/topgoalhotwalletbreach.php}} thumb|TopGoalTopGoal is a system of NFT collectibles featuring historic moments of football/soccer. One of the hot wallets for the TMT token was breached through an undisclosed means, and 4,809,984 TMT was taken, liquidated for 2,600 BNB. The funds were mixed through TornadoCash. The original tokens were all belonging to the founding team. An equiv...")
• 10:49, 28 January 2023 Azoundria talk contribs created page File:Topgoal.jpg
• 10:49, 28 January 2023 Azoundria talk contribs uploaded File:Topgoal.jpg
• 10:48, 28 January 2023 Azoundria talk contribs created page Titano Finance Evil Contractors (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/titanofinanceevilcontractors.php}} thumb|Titano FinanceTitano is a project which offers an automatic staking protocol, meaning that tokens are automatically staked without the user having to take any action. They used a custom smart contract hot wallet, which was developed by a third party. A backdoor was left in the contract during the deployment, which allowed the thir...")
• 10:48, 28 January 2023 Azoundria talk contribs created page File:Titanofinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs uploaded File:Titanofinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs created page Build Finance Malicious Governance Takeover (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/buildfinancemaliciousgovernancetakeover.php}} thumb|Build FinanceBuild finance operated a decentralized autonomous venture builder, launching new projects using funds in a treasury overseen by a decentralized governance model. Unfortunately, a malicious actor took over the protocol and drained the funds once they gained enough BUILD tokens, managed to disable bots that no...")
• 10:48, 28 January 2023 Azoundria talk contribs created page File:Buildfinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs uploaded File:Buildfinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs created page Coinbase Advanced Market Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinbaseadvancedmarketvulnerability.php}} thumb|CoinbaseCoinbase had a critical bug in their centralized trading platform, which would have allowed hackers to swap assets for one another arbitrarily in making trades. For example, a user could trade BTC to USD, but actually offer up only an equivalent amount of Shiba Inu token. No funds were lost as the issue was reported by a...")
• 10:47, 28 January 2023 Azoundria talk contribs created page FutureSwap Credential Disclosure (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/futureswapcredentialdisclosure.php}} thumb|FutureSwapFutureSwap is a decentralized exchange that operates on Arbitrum, a layer 2 solution to scale ethereum. One of the users who held over 300,000 FST (valued ~$798k USD) suffered an account breach and their funds were stolen. Details of the specific breach method were not located. The protocol apparently paused the smart con...")
• 10:47, 28 January 2023 Azoundria talk contribs created page File:Futureswap.jpg
• 10:47, 28 January 2023 Azoundria talk contribs uploaded File:Futureswap.jpg
• 10:47, 28 January 2023 Azoundria talk contribs created page Dego Finance Key Compromised (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/degofinancekeycompromised.php}} thumb|Dego FinanceDego Finance offers a foundation for NFT projects to acquire users, distribute tokens, and auction or trade NFTs. It was a relatively unknown project when they fell under attack, apparently due to compromised keys. The entire liquidity pool was drained and funds were successfully mixed through TornadoCash. While the project...")
• 10:47, 28 January 2023 Azoundria talk contribs created page File:Degofinance.jpg
• 10:47, 28 January 2023 Azoundria talk contribs uploaded File:Degofinance.jpg
• 10:47, 28 January 2023 Azoundria talk contribs created page BabyMuskCoin Honeypot Rugpull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/babymuskcoinhoneypotrugpull.php}} thumb|BabyMuskCoinBaby Musk Coin was a new meme coin launched to supposedly attract the attention of Elon Musk. The smart contract was structured to prevent the token from being sold other than by founders. The token was able to trend on CoinMarketCap and then even gained some news coverage before the founders decided to sell all tokens i...")
• 10:46, 28 January 2023 Azoundria talk contribs created page File:Babymuskcoin.jpg
• 10:46, 28 January 2023 Azoundria talk contribs uploaded File:Babymuskcoin.jpg
• 10:46, 28 January 2023 Azoundria talk contribs created page IRA Financial Suspicious Withdrawals (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/irafinancialsuspiciouswithdrawals.php}} thumb|IRA FinancialIRA Financial offers the ability for clients to invest in bitcoin and ethereum, which is stored in the third party custodian Gemini. In a single day, $36m worth of client funds were transferred between accounts and removed from the Gemini platform. These funds were then mixed. Unsurprisingly, insurance is not cove...")
• 10:46, 28 January 2023 Azoundria talk contribs created page File:Irafinancial.jpg
• 10:46, 28 January 2023 Azoundria talk contribs uploaded File:Irafinancial.jpg
• 10:46, 28 January 2023 Azoundria talk contribs created page Superfluid Wallet Impersonation (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/superfluidwalletimpersonation.php}} thumb|SuperfluidSuperfluid offers an innovative way for entities to continually stream payments, settling recurring and continual payments without multiple transactions being required. Despite multiple audits, an exploit still existed in the smart contract hot wallet which allowed the attacker to impersonate paying entities and create pay...")
• 10:46, 28 January 2023 Azoundria talk contribs created page File:Superfluid.jpg
• 10:46, 28 January 2023 Azoundria talk contribs uploaded File:Superfluid.jpg
• 10:45, 28 January 2023 Azoundria talk contribs created page Meter.io Minting Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/meteriomintingexploit.php}} thumb|Meter.ioMeter.io is a large multi-chain bridge, which allows assets to be moved between different blockchain smart contract networks. As part of their setup, funds exist locked in smart contract hot wallets, which back representative tokens used in the transfer. Based on an attacker exploiting a missing validation check, extra tokens were mint...")
• 10:45, 28 January 2023 Azoundria talk contribs created page File:Meterio.jpg
• 10:45, 28 January 2023 Azoundria talk contribs uploaded File:Meterio.jpg
• 10:45, 28 January 2023 Azoundria talk contribs created page PayBito Customer Data Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/paybitocustomerdatabreach.php}} thumb|PayBitoPayBito is a large cryptocurrency exchange operating in the US and India. On February 3rd, 2022, a ransom group apparently gained access to the records of over 100,000 customers, including weakly hashed passwords. The group also claimed they were going to publish the records if a ransom was not paid by February 21st. There is no ind...")
• 10:45, 28 January 2023 Azoundria talk contribs created page File:Paybito.jpg
• 10:45, 28 January 2023 Azoundria talk contribs uploaded File:Paybito.jpg
• 10:44, 28 January 2023 Azoundria talk contribs created page KlaySwap BGP Hijacking (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/klayswapbgphijacking.php}} thumb|KlaySwapKlaySwap suffered an advanced BGP hijack attack, when an adversary managed to modify the JavaScript on the site to a malicious version which changed all transactions into a request to send funds to them. In total, $1.9M was taken over a series of 407 transactions before the malicious code was removed. The KlaySwap team has created a re...")
• 10:44, 28 January 2023 Azoundria talk contribs created page File:Klayswap.jpg
• 10:44, 28 January 2023 Azoundria talk contribs uploaded File:Klayswap.jpg
• 10:44, 28 January 2023 Azoundria talk contribs created page Wormhole Network Signature Validation Loophole (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/wormholenetworksignaturevalidationloophole.php}} thumb|Wormhole NetworkWormhole Finance is a decentralized bridge between multiple chains including Ethereum, Solana, Terra, Binance Smart Chain, Polygon, Avalanche, and Oasis. A decentralized network of 19 guardians secure the bridge. An attacker exploited a signature verification vulnerability in the smart contract hot...")
• 10:44, 28 January 2023 Azoundria talk contribs created page File:Wormholenetwork.jpg
• 10:44, 28 January 2023 Azoundria talk contribs uploaded File:Wormholenetwork.jpg