All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 21:35, 28 January 2023 Azoundria talk contribs created page Bored Ape Yacht Club Instagram Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/boredapeyachtclubinstagramhack.php}} thumb|Bored Ape Yacht ClubThe Bored Ape Yacht Club Instagram account was successfully breached despite apparently using 2 factor authentication. This allowed the attacker to post an announcement on the channel, letting users know about a new minting opportunity with the OthersideMeta project, due to launch a week later. Once users...")
• 21:35, 28 January 2023 Azoundria talk contribs created page BondAppetite Stablecoin Peg Lost (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bondappetitestablecoinpeglost.php}} thumb|BondAppetiteBondAppetite was a stablecoin backed by real-world yield generating bonds. The bonds that back USDap are supposedly stored by a licensed custodian in a stable jurisdiction. After multiple excursions below $1, the peg appears to have been lost at some point on April 18th, 2022. On June 8th, 2022, the protocol began an a...")
• 21:35, 28 January 2023 Azoundria talk contribs created page File:Bondappetit.jpg
• 21:35, 28 January 2023 Azoundria talk contribs uploaded File:Bondappetit.jpg
• 21:35, 28 January 2023 Azoundria talk contribs created page Beanstalk Farms Stablecoin Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/beanstalkfarmsstablecoinhack.php}} thumb|BeanstalkBeanstalk Finance is a decentralized credit-based stablecoin protocol launched in August 2021 by anonymous developers. The stablecoin was backed by a smart governance contract which allowed holders of the "stalk" token to propose and vote on new proposals. Fortunately for a certain attacker, the price to acquire the vast majo...")
• 21:34, 28 January 2023 Azoundria talk contribs created page File:Beanstalk.jpg
• 21:34, 28 January 2023 Azoundria talk contribs uploaded File:Beanstalk.jpg
• 21:34, 28 January 2023 Azoundria talk contribs created page Trezor Data Breach Phishing (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/trezordatabreachphishing.php}} thumb|TrezorMultiple users of the Trezor hardware wallet had their email addresses compromised, and the phishing attacker sent out a realistic, typo-free, and well planned attack complete with an altered version of the application, which requested their seed phrase. While the total value of the loss hasn't been publicized, at least one user was fo...")
• 21:34, 28 January 2023 Azoundria talk contribs created page Kaiju Kingz Discord Ticket Tool Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/kaijukingzdiscordtickettoolhack.php}} thumb|Kaiju KingzThe Kaiju Kings are a collection of thousands of pixel beast NFTs, which are rare collectibles that provide access to a specialized metaverse or the ability to mint other NFTs and tokens. On April 1st, 2022, their Discord was again hacked through the Ticket Tool bot. Many concerned users banded together to post more spa...")
• 21:34, 28 January 2023 Azoundria talk contribs created page Nyoki Club Discord Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nyokiclubdiscordhack.php}} thumb|Nyoki ClubNyoki Club is a popular set of 2,732 NFT characters. On April 1st, their Discord server was attacked, with a fake link posted promising a cheap mint of 1,000 new Nyoki NFT characters. It is believed that the access token was compromised when one of the Admin accounts used the same token to validate on another Discord serer. It is un...")
• 21:33, 28 January 2023 Azoundria talk contribs created page File:Nyokiclub.jpg
• 21:33, 28 January 2023 Azoundria talk contribs uploaded File:Nyokiclub.jpg
• 21:33, 28 January 2023 Azoundria talk contribs created page Shamanzs Discord Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/shamanzsdiscordhack.php}} thumb|ShamanzsShamanzs NFT Discord included the third party Ticket Tool plug-in, which was either malicious or exploited by a third party to post malicious links on the discord channel. The malicious link took users to a fake minting page, where they could generously donate their money to the hacker if they didn't have an interest in verifying the sm...")
• 21:33, 28 January 2023 Azoundria talk contribs created page File:Shamanzs.jpg
• 21:33, 28 January 2023 Azoundria talk contribs uploaded File:Shamanzs.jpg
• 10:58, 28 January 2023 Azoundria talk contribs created page Doodles NFT Discord Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/doodlesnftdiscordhack.php}} thumb|Doodles NFTThe Doodles NFT are a collection of 10,000 hand-drawn NFT images made by a Canadian artist with the handle "Burnt Toast". The Discord server of the project was hacked on March 31st/April 1st using an exploit in the webhooks for a ticketing system in common use. Viewers of the Discord were promised a great deal on a limited editio...")
• 10:58, 28 January 2023 Azoundria talk contribs created page Bored Ape Yacht Club Discord Ticket Tool Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/boredapeyachtclubdiscordtickettoolhack.php}} thumb|Bored Ape Yacht ClubThe Bored Ape Yacht Club Discord channel was successfully breached through the permissions granted to the commonly used Ticket Tool. This allowed the attacker to post an announcement on the channel, letting users know about a new minting opportunity. Once users clicked the link and signed the tran...")
• 10:58, 28 January 2023 Azoundria talk contribs created page File:Boredapeyachtclub.jpg
• 10:58, 28 January 2023 Azoundria talk contribs uploaded File:Boredapeyachtclub.jpg
• 10:57, 28 January 2023 Azoundria talk contribs created page Ola Finance Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/olafinanceexploit.php}} thumb|Ola FinanceOla Finance offers a service which allows others to launch decentralized lending platforms. There was a reentrancy exploit in the smart contract which was exploited by an attacker to take a significant amount of funds. The attacker was unable to be reached to negotiate the return of the funds, however the Ola Finance developers have...")
• 10:57, 28 January 2023 Azoundria talk contribs created page File:Olafinance.jpg
• 10:57, 28 January 2023 Azoundria talk contribs uploaded File:Olafinance.jpg
• 10:57, 28 January 2023 Azoundria talk contribs created page Axie Infinity Ronin Bridge Unauthorized Treasury Access (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/axieinfinityunauthorizedtreasuryaccess.php}} thumb|Axie InfinityAxie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off wit...")
• 10:57, 28 January 2023 Azoundria talk contribs created page File:Axieinfinity.jpg
• 10:57, 28 January 2023 Azoundria talk contribs uploaded File:Axieinfinity.jpg
• 10:56, 28 January 2023 Azoundria talk contribs created page Cash.io App Solana Fake Account Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/cashioappsolanafakeaccountexploit.php}} thumb|Cash.io AppThe cash.io app is a blockchain stablecoin on the Solana blockchain. Due to a missing validation in the smart contract, a smart hacker was able to drain $52.8m worth of funds from the smart contract. The attacker made the decision that they would return the funds of all accounts that lost less than $100k, and sent thos...")
• 10:56, 28 January 2023 Azoundria talk contribs created page File:Cashioapp.jpg
• 10:56, 28 January 2023 Azoundria talk contribs uploaded File:Cashioapp.jpg
• 10:56, 28 January 2023 Azoundria talk contribs created page Swan Bitcoin Hubspot Data Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/swanbitcoinhubspotdatabreach.php}} thumb|Swan BitcoinSwan Bitcoin is a platform which assists users in saving money in bitcoin by allowing easy routine purchases. The company used HubSpot to assist with managing their customer relationships. HubSpot suffered a data breach and names, email addresses, and phone numbers of customers were leaked. An announcement was made and t...")
• 10:56, 28 January 2023 Azoundria talk contribs created page File:Swanbitcoin.jpg
• 10:56, 28 January 2023 Azoundria talk contribs uploaded File:Swanbitcoin.jpg
• 10:56, 28 January 2023 Azoundria talk contribs created page BlockFi Hubspot Data Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/blockfihubspotdatabreach.php}} thumb|BlockFiBlockFi is a platform which allows users to provide their cryptocurrency and earn a high rate of return, as the platform lends out the funds to other users. The company used HubSpot to assist with managing their customer relationships. HubSpot suffered a data breach and names, email addresses, and phone numbers of customers were leak...")
• 10:55, 28 January 2023 Azoundria talk contribs created page Circle HubSpot Data Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/circlehubspotdatabreach.php}} thumb|CircleCircle is one of the most well-known companies, a key backer of the USDC stablecoin. They were reportedly among those companies affected by the Hubspot data breach. They let customers know by email and also issued some public statements. There have been no specific reports of Circle clients or customers being targeted subsequently. Thi...")
• 10:55, 28 January 2023 Azoundria talk contribs created page File:Circle.jpg
• 10:55, 28 January 2023 Azoundria talk contribs uploaded File:Circle.jpg
• 10:55, 28 January 2023 Azoundria talk contribs created page NYDIG HubSpot Data Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nydighubspotdatabreach.php}} thumb|NYDIGNYDIG is an institution-grade bitcoin company offering multiple bitcoin-integrated products. They were reportedly among those companies affected by the Hubspot data breach. A third party tweet shows an email they have sent to athose affected. They they have not publicly confirmed the breach or made any further statements. There have been n...")
• 10:55, 28 January 2023 Azoundria talk contribs created page File:Nydig.jpg
• 10:55, 28 January 2023 Azoundria talk contribs uploaded File:Nydig.jpg
• 10:54, 28 January 2023 Azoundria talk contribs created page Rare Bears Discord Attack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/rarebearsdiscordattack.php}} thumb|Rare BearsRare Bears are an NFT set of 2,347 unique bears made by a New Zealand artist nicknamed Enox. The project's Discord server became compromised through the account of one of the moderators, and a fake sale was promoted there. In reality, users who interacted with that site could find their wallets emptied by the permissions they g...")
• 10:54, 28 January 2023 Azoundria talk contribs created page File:Rarebearsnft.jpg
• 10:54, 28 January 2023 Azoundria talk contribs uploaded File:Rarebearsnft.jpg
• 10:54, 28 January 2023 Azoundria talk contribs created page Unchained Capital ActiveCampaign Privacy Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/unchainedcapitalactivecampaignprivacybreach.php}} thumb|Unchained CapitalUnchained Capital is a bitcoin custody service which assists individuals in setting up multi-signature wallets. For marketing, they used a customer relationship management tool called ActiveCampaign. In February 2022, they closed down their account and requested all data to be deleted. However, t...")
• 10:54, 28 January 2023 Azoundria talk contribs created page File:Unchainedcapital.jpg
• 10:54, 28 January 2023 Azoundria talk contribs uploaded File:Unchainedcapital.jpg
• 10:54, 28 January 2023 Azoundria talk contribs created page Fantasm Finance Contract Vulnerabilities (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/fantasmfinancecontractvulnerabilities.php}} thumb|Fantasm FinanceFantasm Finance is a protocol creating a synthetic token which is 1:1 pegged against the Fantom token. Due to a missing condition check for the minimum amount of fantom, the smart contract hot wallet was vulnerable. A malicious user exploited this and made off with over 1,007 ETH from the hot wallet. Some...")
• 10:53, 28 January 2023 Azoundria talk contribs created page File:Fantasmfinance.jpg
• 10:53, 28 January 2023 Azoundria talk contribs uploaded File:Fantasmfinance.jpg
• 10:53, 28 January 2023 Azoundria talk contribs created page Pirate X Pirate Private Key Leak (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/piratexpirateprivatekeyleak.php}} thumb|Pirate X PirateThe Pirate X Pirate NFT game suffered a breach that resulted in 212 BNB (~$83k USD) worth of funds being taken. The breach appears to be the result of a private key leak, and very limited details have been published on how the key may have leaked. The company has instead fired their development team and hired externa...")
• 10:53, 28 January 2023 Azoundria talk contribs created page File:Piratexpirate.jpg
• 10:53, 28 January 2023 Azoundria talk contribs uploaded File:Piratexpirate.jpg