All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 10:53, 28 January 2023 Azoundria talk contribs created page OpenDAO USDO Stable Coin Collapses (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/opendaousdostablecoincollapses.php}} thumb|OpenDAOOpenDAO launched with the ambitious goal of creating a stablecoin that was intended to be widely adopted throughout decentralized finance. Unlike other coins, the OpenDao was intending to be backed also by real world assets in addition to digital assets, promising a liquidation handling method for dealing with potential default...")
• 10:53, 28 January 2023 Azoundria talk contribs created page File:Opendao.jpg
• 10:53, 28 January 2023 Azoundria talk contribs uploaded File:Opendao.jpg
• 10:52, 28 January 2023 Azoundria talk contribs created page TreasureDAO NFT Market Hacked (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/treasuredaonftmarkethacked.php}} thumb|TreasureDAOTreasureDAO has a NFT marketplace running on the Arbitum blockchain. A bug existed in the smart contract marketplace hot wallet where the NFTs could be taken by specifying a "quantity" of zero, at which point a price of 0 would be calculated for the item. This was exploited to steal hundreds of NFTs. This is a global/inter...")
• 10:52, 28 January 2023 Azoundria talk contribs created page File:Treasuredao.jpg
• 10:52, 28 January 2023 Azoundria talk contribs uploaded File:Treasuredao.jpg
• 10:52, 28 January 2023 Azoundria talk contribs created page Ledger Phishing Attack On Dutch Users (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/ledgerphishingattackondutchusers.php}} thumb|LedgerLedger reports that a recent phishing campaign was launched targeting Dutch users in their language. This email pretends to be from a law firm working with Ledger, and requests the users to click a malicious link for 2FA verification. While details are not provided, typically links will either try to run a malicious transaction...")
• 10:52, 28 January 2023 Azoundria talk contribs created page OpenSea Fake Verification Phishing Emails (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseafakeverificationphishingemails.php}} thumb|OpenSeaMany users of OpenSea, one of the largest NFT marketplaces in the world, received phishing emails requesting them to click a link and complete a verification within the next couple of days, threatening an account suspension. The email was not from OpenSea, and likely attempted to steal assets or the private keys of users...")
• 10:52, 28 January 2023 Azoundria talk contribs created page Doodles NFT Discord Hacked (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/doodlesnftdiscordhacked.php}} thumb|Doodles NFTThe Doodles NFT are a collection of 10,000 hand-drawn NFT images made by a Canadian artist with the handle "Burnt Toast". The Discord server of the project was hacked on February 26th by an unknown exploit. It is unknown how much was taken, and doesn't appear any was recovered. Similar exploits have commonly abused webhooks bei...")
• 10:51, 28 January 2023 Azoundria talk contribs created page File:Doodlesnft.jpg
• 10:51, 28 January 2023 Azoundria talk contribs uploaded File:Doodlesnft.jpg
• 10:51, 28 January 2023 Azoundria talk contribs created page Ariva Digital Key Breached (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/arivadigitalkeybreached.php}} thumb|Ariva DigitalAriva Digital was a blockchain project with a focus on tourism and travel. One of their staking contracts was breached, presumably due to a private key breach. All assets were liquidated via TornadoCash. According to the team, they have enough funds to reimburse all affected users, although KYC will be required to get any f...")
• 10:51, 28 January 2023 Azoundria talk contribs created page File:Arivadigital.jpg
• 10:51, 28 January 2023 Azoundria talk contribs uploaded File:Arivadigital.jpg
• 10:51, 28 January 2023 Azoundria talk contribs created page Lana Rhoades Alleged Rug Pull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lanarhoadesallegedrugpull.php}} thumb|OpenSeaLana Rhoades created her own brand of NFT, and made promises to investors online. The market uptake of her NFTs was less than predicted, and investors started to complain after Lana Rhoades liquidated $1.5m, apparently to pay her team. Some even accused her of scamming them, including influential Coffeezilla. Following this, Lan...")
• 10:51, 28 January 2023 Azoundria talk contribs created page File:Lanarhoades.jpg
• 10:51, 28 January 2023 Azoundria talk contribs uploaded File:Lanarhoades.jpg
• 10:50, 28 January 2023 Azoundria talk contribs created page Flurry Finance Vault Flash Loan Attack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/flurryfinancevaultflashloanattack.php}} thumb|Flurry FinanceFlurry Finance is a yield farming protocol which offers a stablecoin with interest. An attacker was able to exploit the smart contract hot wallet and removed between $251,000 and $293,000 USD worth of funds by increasing their token balance using a Flash loan. The protocol has vowed to reimburse all affected use...")
• 10:50, 28 January 2023 Azoundria talk contribs created page File:Flurryfinance.jpg
• 10:50, 28 January 2023 Azoundria talk contribs uploaded File:Flurryfinance.jpg
• 10:50, 28 January 2023 Azoundria talk contribs created page Compound Finance Live Critical Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/compoundfinancelivecriticalvulnerability.php}} thumb|Compound FinanceCompound Finance is a protocol which allows for decentralized lending. It operates with 18 separate markets including TrueUSD. A critical vulnerability was discovered during an audit. A public function can be used to sweep tokens accidentally sent to the smart contract, however this could also be used...")
• 10:50, 28 January 2023 Azoundria talk contribs created page OpenSea Phishing Attack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseaphishingattack.php}} thumb|OpenSeaMultiple users on the OpenSea platform were the subject of a phishing attack, from an unknown vector. OpenSea is still investigating, and hasn't been able to determine the cause. It is reported that some of the NFT tokens were returned by the attacker, while others were sold, and the proceeds mixed through TornadoCash. This is a global...")
• 10:49, 28 January 2023 Azoundria talk contribs created page Gold Mine Finance Scam (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/goldminefinancescam.php}} Gold Mine Finance was a new protocol on the Fantom blockchain, a fork of Tomb Finance. There were no documents or website for the fork. It was promoted solely on Twitter and some listing sites. The smart contract hot wallet had a clever vulnerability present to enable the removal of liquidity. Although $800k of liquidity was originally present in the protocol, $700k was r...")
• 10:49, 28 January 2023 Azoundria talk contribs created page RigoBlock Missing Access Controls (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/rigoblockmissingaccesscontrols.php}} thumb|RigoBlockRigoBlock had an exploit on their smart contract hot wallet, where the access controls had not been set up properly. The protocol was exploited and 160.86 ETH was taken. The attacker later returned 90% of the funds, keeping the remaining 10% as a bounty. The returned funds are anticipated to be redistributed to affected use...")
• 10:49, 28 January 2023 Azoundria talk contribs created page File:Rigoblock.jpg
• 10:49, 28 January 2023 Azoundria talk contribs uploaded File:Rigoblock.jpg
• 10:49, 28 January 2023 Azoundria talk contribs created page TopGoal Hot Wallet Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/topgoalhotwalletbreach.php}} thumb|TopGoalTopGoal is a system of NFT collectibles featuring historic moments of football/soccer. One of the hot wallets for the TMT token was breached through an undisclosed means, and 4,809,984 TMT was taken, liquidated for 2,600 BNB. The funds were mixed through TornadoCash. The original tokens were all belonging to the founding team. An equiv...")
• 10:49, 28 January 2023 Azoundria talk contribs created page File:Topgoal.jpg
• 10:49, 28 January 2023 Azoundria talk contribs uploaded File:Topgoal.jpg
• 10:48, 28 January 2023 Azoundria talk contribs created page Titano Finance Evil Contractors (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/titanofinanceevilcontractors.php}} thumb|Titano FinanceTitano is a project which offers an automatic staking protocol, meaning that tokens are automatically staked without the user having to take any action. They used a custom smart contract hot wallet, which was developed by a third party. A backdoor was left in the contract during the deployment, which allowed the thir...")
• 10:48, 28 January 2023 Azoundria talk contribs created page File:Titanofinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs uploaded File:Titanofinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs created page Build Finance Malicious Governance Takeover (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/buildfinancemaliciousgovernancetakeover.php}} thumb|Build FinanceBuild finance operated a decentralized autonomous venture builder, launching new projects using funds in a treasury overseen by a decentralized governance model. Unfortunately, a malicious actor took over the protocol and drained the funds once they gained enough BUILD tokens, managed to disable bots that no...")
• 10:48, 28 January 2023 Azoundria talk contribs created page File:Buildfinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs uploaded File:Buildfinance.jpg
• 10:48, 28 January 2023 Azoundria talk contribs created page Coinbase Advanced Market Vulnerability (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/coinbaseadvancedmarketvulnerability.php}} thumb|CoinbaseCoinbase had a critical bug in their centralized trading platform, which would have allowed hackers to swap assets for one another arbitrarily in making trades. For example, a user could trade BTC to USD, but actually offer up only an equivalent amount of Shiba Inu token. No funds were lost as the issue was reported by a...")
• 10:47, 28 January 2023 Azoundria talk contribs created page FutureSwap Credential Disclosure (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/futureswapcredentialdisclosure.php}} thumb|FutureSwapFutureSwap is a decentralized exchange that operates on Arbitrum, a layer 2 solution to scale ethereum. One of the users who held over 300,000 FST (valued ~$798k USD) suffered an account breach and their funds were stolen. Details of the specific breach method were not located. The protocol apparently paused the smart con...")
• 10:47, 28 January 2023 Azoundria talk contribs created page File:Futureswap.jpg
• 10:47, 28 January 2023 Azoundria talk contribs uploaded File:Futureswap.jpg
• 10:47, 28 January 2023 Azoundria talk contribs created page Dego Finance Key Compromised (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/degofinancekeycompromised.php}} thumb|Dego FinanceDego Finance offers a foundation for NFT projects to acquire users, distribute tokens, and auction or trade NFTs. It was a relatively unknown project when they fell under attack, apparently due to compromised keys. The entire liquidity pool was drained and funds were successfully mixed through TornadoCash. While the project...")
• 10:47, 28 January 2023 Azoundria talk contribs created page File:Degofinance.jpg
• 10:47, 28 January 2023 Azoundria talk contribs uploaded File:Degofinance.jpg
• 10:47, 28 January 2023 Azoundria talk contribs created page BabyMuskCoin Honeypot Rugpull (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/babymuskcoinhoneypotrugpull.php}} thumb|BabyMuskCoinBaby Musk Coin was a new meme coin launched to supposedly attract the attention of Elon Musk. The smart contract was structured to prevent the token from being sold other than by founders. The token was able to trend on CoinMarketCap and then even gained some news coverage before the founders decided to sell all tokens i...")
• 10:46, 28 January 2023 Azoundria talk contribs created page File:Babymuskcoin.jpg
• 10:46, 28 January 2023 Azoundria talk contribs uploaded File:Babymuskcoin.jpg
• 10:46, 28 January 2023 Azoundria talk contribs created page IRA Financial Suspicious Withdrawals (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/irafinancialsuspiciouswithdrawals.php}} thumb|IRA FinancialIRA Financial offers the ability for clients to invest in bitcoin and ethereum, which is stored in the third party custodian Gemini. In a single day, $36m worth of client funds were transferred between accounts and removed from the Gemini platform. These funds were then mixed. Unsurprisingly, insurance is not cove...")
• 10:46, 28 January 2023 Azoundria talk contribs created page File:Irafinancial.jpg
• 10:46, 28 January 2023 Azoundria talk contribs uploaded File:Irafinancial.jpg
• 10:46, 28 January 2023 Azoundria talk contribs created page Superfluid Wallet Impersonation (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/superfluidwalletimpersonation.php}} thumb|SuperfluidSuperfluid offers an innovative way for entities to continually stream payments, settling recurring and continual payments without multiple transactions being required. Despite multiple audits, an exploit still existed in the smart contract hot wallet which allowed the attacker to impersonate paying entities and create pay...")
• 10:46, 28 January 2023 Azoundria talk contribs created page File:Superfluid.jpg