All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 21:41, 27 January 2023 Azoundria talk contribs created page PNetwork Faulty TX Processing (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/pnetworkfaultytxprocessing.php}} thumb|PNetworkpNetwork offers an automated bridge between chains. This involves the storage of crypto-assets in smart contract hot wallets to provide liquidity. One of the bridges, holding bitcoin, was successfully exploited, and 227 BTC was stolen. A compensation plan was put together including the sale of NFTs and redirecting future rewards...")
• 21:41, 27 January 2023 Azoundria talk contribs created page File:Pnetwork.jpg
• 21:41, 27 January 2023 Azoundria talk contribs uploaded File:Pnetwork.jpg
• 21:41, 27 January 2023 Azoundria talk contribs created page Defibox Hack Despite Double Audit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/defiboxhackdespitedoubleaudit.php}} thumb|DefiboxDefibox offers a wide range of blockchain services including a swap contract. Their twice-audited smart contract for swapping still had an exploit. The incident is not mentioned on their Twitter. This is a global/international case not involving a specific country. == About Defibox == "Defibox is a one-stop DeFi application pl...")
• 21:40, 27 January 2023 Azoundria talk contribs created page File:Defibox.jpg
• 21:40, 27 January 2023 Azoundria talk contribs uploaded File:Defibox.jpg
• 21:40, 27 January 2023 Azoundria talk contribs created page SushiSwap MISO Jaypegs Automart (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisojaypegsautomart.php}} thumb|SushiSwapJay Peg's Auto Mart included an NFT collection sold through the Sushiswap MISO platform. At the last minute, the contract was modified to send funds to the account of a developer. It took a while to detect the issue, and the developer initially denied what had happened, however they quickly came around to repaying the funds....")
• 21:40, 27 January 2023 Azoundria talk contribs created page NowSwap Protocol Logic Error (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nowswapprotocollogicerror.php}} thumb|NowSwapThe NowSwap protocol stored customer funds in their smart contract hot wallets, which was not only not audited but closed source. Due to an exploit, a vulnerability which was apparently similar to one exploited in April on Uranium Finance, $1m in assets were stolen. This is a global/international case not involving a specific count...")
• 21:40, 27 January 2023 Azoundria talk contribs created page File:Nowswap.jpg
• 21:40, 27 January 2023 Azoundria talk contribs uploaded File:Nowswap.jpg
• 15:27, 27 January 2023 Azoundria talk contribs created page GrowingFi Withdraw Not Checked (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/growingfiwithdrawnotchecked.php}} thumb|GrowingFiDespite an audit from CertiK, the GrowingFi platform smart contract hot wallet still suffered a significant theft. The platform ran multiple attempts to create a recovery for their affected users and it appears they may have compensated a large portion of the funds, though nowhere near all of them. This is a global/internatio...")
• 15:27, 27 January 2023 Azoundria talk contribs created page File:Growingfi.jpg
• 15:27, 27 January 2023 Azoundria talk contribs uploaded File:Growingfi.jpg
• 15:27, 27 January 2023 Azoundria talk contribs created page Secret Swap Secret Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/secretswapsecretbreach.php}} thumb|Secret SwapThe Secret Swap platform allows exchange of Secret assets on the Secret Network (validated by Secret Agents). The bridge took advantage of Secret Smart Contract Hot Wallets as bridges. The exact breach which occurred is a Secret (no post mortem) but luckily the resulting blockchain is also being kept secret (rolled back). This m...")
• 15:27, 27 January 2023 Azoundria talk contribs created page File:Secretswap.jpg
• 15:27, 27 January 2023 Azoundria talk contribs uploaded File:Secretswap.jpg
• 15:27, 27 January 2023 Azoundria talk contribs created page Zabu Finance Staking Calculation Bug (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/zabufinancestakingcalculationbug.php}} thumb|Zabu FinanceZabu Finance created a large liquidity pool for the Avalanche blockchain. As is typical in exploited cases, funds were stored in a large smart contract hot wallet. In this case, there was an exploit around deflationary token handling. The team used a snapshot to re-issue tokens in an attempt to compensate affected us...")
• 15:26, 27 January 2023 Azoundria talk contribs created page File:Zabufinance.jpg
• 15:26, 27 January 2023 Azoundria talk contribs uploaded File:Zabufinance.jpg
• 15:26, 27 January 2023 Azoundria talk contribs created page Ledger Wallet Cleared Out TuckerCR (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ledgerwalletclearedouttuckercr.php}} thumb|LedgerReddit user TuckerCR was tricked into divulging his seed phrase to a scammer on Telegram. He was directed to a website which appeared legitimate and allowed him to enter his seed phrase, after which his funds were immediately removed from the account. He reportedly lost $350k orth of BTC and ETH. This is a global/international c...")
• 15:26, 27 January 2023 Azoundria talk contribs created page AFK Finance Goes AFK (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/afkfinancegoesafk.php}} thumb|AFK Systems FinanceAs a completely anonymous team, AFK Systems Finance launched a new platform including a vault, with known exploits in the smart contract hot wallet. They then got a couple of smart contract auditors to audit the smart contract, presumably until they found one which wouldn't do the audit right away. When the audit results came...")
• 15:26, 27 January 2023 Azoundria talk contribs created page File:Afkfinance.jpg
• 15:26, 27 January 2023 Azoundria talk contribs uploaded File:Afkfinance.jpg
• 15:26, 27 January 2023 Azoundria talk contribs created page DYdX Pledge Contract Bug (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/dydxpledgecontractbug.php}} thumb|DYdXThe audited dYdX contract was launched with an incorrect ratio, which prevented users from performing withdrawals as anticipated. Funds were locked in the smart contract, and all are recoverable. This is a global/international case not involving a specific country. == About DYdX == "Perpetuals, decentralized." "Trade Perpetual Contracts wit...")
• 15:25, 27 January 2023 Azoundria talk contribs created page File:Dydx.jpg
• 15:25, 27 January 2023 Azoundria talk contribs uploaded File:Dydx.jpg
• 15:24, 27 January 2023 Azoundria talk contribs created page OpenZeppelin UUPS Proxy Initialization Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openzeppelinuupsproxyinitializationvulnerability.php}} thumb|OpenZeppelinThe OpenZeppelin smart contract framework had a vulnerability which would allow an adversary to take over the smart contract, if it hadn't been initialized yet. It's unclear if it was possible to take any funds using this method, however it was certainly possible to destroy existing smart contracts,...")
• 15:24, 27 January 2023 Azoundria talk contribs created page Convex Finance Malicious Search Results (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/convexfinancemalicioussearchresults.php}} thumb|Convex FinanceConvex Finance is a tool to increase rewards for stakers and liquidity providers on the curve protocol. Malicious entities made a copy of their website on a similar domain name, which most likely attempted to trick users into making payments or divulging their seed phrase. It is unclear if any funds were succe...")
• 15:24, 27 January 2023 Azoundria talk contribs created page File:Convexfinance.jpg
• 15:24, 27 January 2023 Azoundria talk contribs uploaded File:Convexfinance.jpg
• 15:24, 27 January 2023 Azoundria talk contribs created page DAO Maker Insufficient Authentication (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/daomakerinsufficientauthentication.php}} thumb|DAO MakerDAO Maker ran a service to enable other projects to launch coins and gain funding. All the token funds were stored in smart contract hot wallets, and the team decided that they didn't need to check who was calling the init function. A hacker decided they would like to initialize some of these wallets for themselves, and...")
• 15:24, 27 January 2023 Azoundria talk contribs created page Siren Market Reentrancy Bug (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sirenmarketreentrancybug.php}} thumb|Siren MarketSiren Market is a decentralized protocol for options. The decision was made to store all funds in a smart contract hot wallet, based on the certainty of the audit by QuantStamp. However, this missed an exploit since it was in "an unusual spot". Therefore, all users face the loss of their funds unless the attacker returns t...")
• 15:24, 27 January 2023 Azoundria talk contribs created page File:Sirenprotocol.jpg
• 15:24, 27 January 2023 Azoundria talk contribs uploaded File:Sirenprotocol.jpg
• 15:23, 27 January 2023 Azoundria talk contribs created page CryptoShares Pyramid Scheme (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/cryptosharespyramidscheme.php}} thumb|CryptoSharesCryptoShares was a scheme run primarily from Zimbabwe by Martin Mhlanga. Investors were promised significant returns of $2000/mo, in exchange for an upfront payment of $330. No payments were ever received, and the founder disappeared on September 1st. It does not seem like anything will be made right for affected users. T...")
• 15:23, 27 January 2023 Azoundria talk contribs created page File:Cryptoshares.jpg
• 15:23, 27 January 2023 Azoundria talk contribs uploaded File:Cryptoshares.jpg
• 15:23, 27 January 2023 Azoundria talk contribs created page Banksy Fake NFT Sale on OpenSea (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/banksyfakenftsaleonopensea.php}} thumb|BanksyPranksy received an anonymous Discord message about a new NFT on the Banksy website, and placed the winning bid. No sooner had he done that then the NFT page was taken down and he found out the whole thing had been an elaborate fake. A hacker had hacked the banksy website, listed their NFT on OpenSea, and then promoted it extensivel...")
• 15:23, 27 January 2023 Azoundria talk contribs created page Cream Finance Reentrancy Bug (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/creamfinancereentrancybug.php}} thumb|Cream FinanceCream Finance is a decentralized lending program. There was a reentrancy exploit in the smart contract hot wallet where AMP and ETH were stored. This enabled a hacker to remove 462,079,976 in AMP and 2,804.96 ETH. It appears that Cream Finance has committed to making this right, and that the hacker ultimately returned the...")
• 15:22, 27 January 2023 Azoundria talk contribs created page Bilaxy Hot Wallet Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bilaxyhotwalletbreach.php}} thumb|BilaxyBilaxy is a cryptocurrency exchange platform based in Seychelles. On August 29th, 2021, their ERC20 hot wallet was breached. Other funds remained safe. The exchange ultimately reopened withdrawals a month later on September 23rd, however it's unclear if the affected ERC20 tokens will ever be available for users. This exchange or platform...")
• 15:22, 27 January 2023 Azoundria talk contribs created page File:Bilaxy.jpg
• 15:22, 27 January 2023 Azoundria talk contribs uploaded File:Bilaxy.jpg
• 15:22, 27 January 2023 Azoundria talk contribs created page XToken Function Access Control Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/xtokenfunctionaccesscontrolexploit.php}} thumb|XTokenxToken stored user funds in a particularly complex smart contract hot wallet. Through missing checks, an attacker was able to drain the wallet. xToken plans to compensate users, and retire the contract, which was already breached once in May. This is a global/international case not involving a specific country. == About XTo...")
• 15:22, 27 January 2023 Azoundria talk contribs created page OpenSea sohrobf Fake Support Scam (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseasohrobffakesupportscam.php}} thumb|OpenSeaOpenSea is one of the largest markets for NFTs globally. One of the users with 11 NFTs was tricked by an opportunistic team of scammers who messaged him exactly at the same time he reached out for help to staff in the public Discord. The scammers looked nearly identical to the legitimate support staff. After a lengthy discussion...")
• 15:21, 27 January 2023 Azoundria talk contribs created page AB Finance Airdrop Scam (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/abfinanceairdropscam.php}} thumb|AB FinanceAt some point on August 25th of 2021, millions of Binance smart chain addresses received a mysterious ABFin token, which appeared to be valuable and directed them to abfin.org. On that website, AB Finance claimed to be a regulated company and that all users had to do to sell their tokens was to unlock them. The unlocking process onl...")
• 15:21, 27 January 2023 Azoundria talk contribs created page File:Abfinance.jpg
• 15:21, 27 January 2023 Azoundria talk contribs uploaded File:Abfinance.jpg
• 15:21, 27 January 2023 Azoundria talk contribs created page Dot Finance Minting Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/dotfinancemintingvulnerability.php}} thumb|Dot FinanceDot Finance offers an innovative yield farm. Despite two audits, their smart contract still suffered from a minting vulnerability. Their platform token dropped in value as the additional tokens were sold. There is no mention of the breach on their social media or website. It's unclear if anything was done to address it....")
• 15:21, 27 January 2023 Azoundria talk contribs created page File:Dotfinance.jpg
• 15:21, 27 January 2023 Azoundria talk contribs uploaded File:Dotfinance.jpg