All public logs

Combined display of all available logs of Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository. You can narrow down the view by selecting a log type, the username (case-sensitive), or the affected page (also case-sensitive).

• 21:39, 28 January 2023 Azoundria talk contribs created page RTFKT Discord Breach (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/rtfktdiscordbreach.php}} thumb|RTFKTNFT platform RTFKT used MEE6, a widely implemented Discord bot which assists with ranking and moderation functions. MEE6 had administrative level access to a wide range of Discord servers where it was set up. One of the MEE6 employee accounts was compromised, and the attackers used that to run widespread phishing attacks on multiple NFT commun...")
• 21:39, 28 January 2023 Azoundria talk contribs created page File:Rtfkt.jpg
• 21:39, 28 January 2023 Azoundria talk contribs uploaded File:Rtfkt.jpg
• 21:39, 28 January 2023 Azoundria talk contribs created page DEI Stablecoin Depegging (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/deistablecoindepegging.php}} thumb|DEIDEI aimed to create a stablecoin which could be swapped across multiple chains without any cost. Unfortunately the protocol depended on the availability of liquidity in farming pools. In other words, the whole thing depended on there being persistent demand for the stablecoin token. DEI tried a wide variety of different approaches t...")
• 21:39, 28 January 2023 Azoundria talk contribs created page File:Deistablecoin.jpg
• 21:39, 28 January 2023 Azoundria talk contribs uploaded File:Deistablecoin.jpg
• 21:38, 28 January 2023 Azoundria talk contribs created page Luna Terra Algorithmic Stablecoin Crash (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lunaterraalgorithmicstablecoincrash.php}} thumb|Terra LabsThe Terra/Luna ecosystem consisted of two tokens. Terra was intended to maintain a "stable" value of $1 USD. Luna, on the other hand, was intended to absorb the volatility from Terra. Holders of Terra were given a blockchain-enforced right to redeem their Terra immediately for $1 worth of Luna, something which is comm...")
• 21:38, 28 January 2023 Azoundria talk contribs created page File:Terraluna.jpg
• 21:38, 28 January 2023 Azoundria talk contribs uploaded File:Terraluna.jpg
• 21:38, 28 January 2023 Azoundria talk contribs created page OpenSea Carl Bot Discord Hack Fake YouTube NFT (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/openseacarlbotdiscordhackfakeyoutubenft.php}} thumb|OpenSeaOpenSea is one of the best known NFT marketplaces globally. They used the Carl Bot to assist with managing their Discord channel. Early in the morning on Friday, May 6th, their Discord channel was overtaken by Carl Bot and used to publish multiple phishing scam links, which announced a partnership with YouTube and enco...")
• 21:38, 28 January 2023 Azoundria talk contribs created page Tsim Sha Tsui Businessmen Robbed (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/tsimshatsuibusinessmenrobbed.php}} thumb|NoneIn Tsim Sha Tsui, a region of Hong Kong, a group of business-people were tricked out of $1.5m HKD (~$191k USD). They had previously transacted with the trader for an even larger sum without issue. They were led to a room which was full of fake equipment and made their transfer. The trader then locked the front door and headed in...")
• 21:37, 28 January 2023 Azoundria talk contribs created page File:Tsimshatsui.jpg
• 21:37, 28 January 2023 Azoundria talk contribs uploaded File:Tsimshatsui.jpg
• 21:37, 28 January 2023 Azoundria talk contribs created page Shamanzs NFT Unfair Dutch Auction (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/shamanzsnftunfairdutchauction.php}} thumb|ShamanzsShamanzs is a set of collectible NFT characters designed by a known team in Barcelona. The NFTs came to be listed on the widely used OpenSea marketplace, however the team changed the URL of the listing near the launch itself. A number of references pointed their community to the old link, and as a result many members were dire...")
• 21:37, 28 January 2023 Azoundria talk contribs created page Near Protocol Rainbow Bridge First Attack Mitigated (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nearprotocolrainbowbridgefirstattackmitigated.php}} thumb|Near ProtocolThe Near Protocol Rainbow Bridge allows the transfer of tokens between the Ethereum, Near, and Aurora blockchain networks. Like most bridges, there is a possibility of attackers submitting fraudulent transactions trying to trick the bridge into releasing funds without making an actual paym...")
• 21:37, 28 January 2023 Azoundria talk contribs created page File:Nearprotocolrainbowbridge.jpg
• 21:37, 28 January 2023 Azoundria talk contribs uploaded File:Nearprotocolrainbowbridge.jpg
• 21:36, 28 January 2023 Azoundria talk contribs created page Aurora Engine $6m Bug Bounty (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/auroraengine$6mbugbounty.php}} thumb|Aurora EngineThe Aurora EVM is a layer 2 scaling solution for the Near Protocol. A bridge existed between the Aurora protocol and the Near or Ethereum blockchains, which could allow someone to attempt to swap their Aurora-based Ethereum to Near-based Ethereum or Ethereum itself, without actually completing the payment of the sour...")
• 21:36, 28 January 2023 Azoundria talk contribs created page File:Nearprotocolaurora.jpg
• 21:36, 28 January 2023 Azoundria talk contribs uploaded File:Nearprotocolaurora.jpg
• 21:36, 28 January 2023 Azoundria talk contribs created page Moonbirds Airdrop Phishing (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/moonbirdsairdropphishing.php}} thumb|MoonbirdsThe Moonbirds NFT project suffered an attempted phishing attack. Attackers rebranded an account with 60k followers and used it to promote a supposed airdrop. Victims were taken to another website with a malicious smart contract designed to steal their funds. It is unclear how successful the attack was. It is possible that no fun...")
• 21:36, 28 January 2023 Azoundria talk contribs created page File:Moonbirds.jpg
• 21:36, 28 January 2023 Azoundria talk contribs uploaded File:Moonbirds.jpg
• 21:35, 28 January 2023 Azoundria talk contribs created page Bored Ape Yacht Club Instagram Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/boredapeyachtclubinstagramhack.php}} thumb|Bored Ape Yacht ClubThe Bored Ape Yacht Club Instagram account was successfully breached despite apparently using 2 factor authentication. This allowed the attacker to post an announcement on the channel, letting users know about a new minting opportunity with the OthersideMeta project, due to launch a week later. Once users...")
• 21:35, 28 January 2023 Azoundria talk contribs created page BondAppetite Stablecoin Peg Lost (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/bondappetitestablecoinpeglost.php}} thumb|BondAppetiteBondAppetite was a stablecoin backed by real-world yield generating bonds. The bonds that back USDap are supposedly stored by a licensed custodian in a stable jurisdiction. After multiple excursions below $1, the peg appears to have been lost at some point on April 18th, 2022. On June 8th, 2022, the protocol began an a...")
• 21:35, 28 January 2023 Azoundria talk contribs created page File:Bondappetit.jpg
• 21:35, 28 January 2023 Azoundria talk contribs uploaded File:Bondappetit.jpg
• 21:35, 28 January 2023 Azoundria talk contribs created page Beanstalk Farms Stablecoin Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/beanstalkfarmsstablecoinhack.php}} thumb|BeanstalkBeanstalk Finance is a decentralized credit-based stablecoin protocol launched in August 2021 by anonymous developers. The stablecoin was backed by a smart governance contract which allowed holders of the "stalk" token to propose and vote on new proposals. Fortunately for a certain attacker, the price to acquire the vast majo...")
• 21:34, 28 January 2023 Azoundria talk contribs created page File:Beanstalk.jpg
• 21:34, 28 January 2023 Azoundria talk contribs uploaded File:Beanstalk.jpg
• 21:34, 28 January 2023 Azoundria talk contribs created page Trezor Data Breach Phishing (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/trezordatabreachphishing.php}} thumb|TrezorMultiple users of the Trezor hardware wallet had their email addresses compromised, and the phishing attacker sent out a realistic, typo-free, and well planned attack complete with an altered version of the application, which requested their seed phrase. While the total value of the loss hasn't been publicized, at least one user was fo...")
• 21:34, 28 January 2023 Azoundria talk contribs created page Kaiju Kingz Discord Ticket Tool Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/kaijukingzdiscordtickettoolhack.php}} thumb|Kaiju KingzThe Kaiju Kings are a collection of thousands of pixel beast NFTs, which are rare collectibles that provide access to a specialized metaverse or the ability to mint other NFTs and tokens. On April 1st, 2022, their Discord was again hacked through the Ticket Tool bot. Many concerned users banded together to post more spa...")
• 21:34, 28 January 2023 Azoundria talk contribs created page Nyoki Club Discord Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/nyokiclubdiscordhack.php}} thumb|Nyoki ClubNyoki Club is a popular set of 2,732 NFT characters. On April 1st, their Discord server was attacked, with a fake link posted promising a cheap mint of 1,000 new Nyoki NFT characters. It is believed that the access token was compromised when one of the Admin accounts used the same token to validate on another Discord serer. It is un...")
• 21:33, 28 January 2023 Azoundria talk contribs created page File:Nyokiclub.jpg
• 21:33, 28 January 2023 Azoundria talk contribs uploaded File:Nyokiclub.jpg
• 21:33, 28 January 2023 Azoundria talk contribs created page Shamanzs Discord Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/shamanzsdiscordhack.php}} thumb|ShamanzsShamanzs NFT Discord included the third party Ticket Tool plug-in, which was either malicious or exploited by a third party to post malicious links on the discord channel. The malicious link took users to a fake minting page, where they could generously donate their money to the hacker if they didn't have an interest in verifying the sm...")
• 21:33, 28 January 2023 Azoundria talk contribs created page File:Shamanzs.jpg
• 21:33, 28 January 2023 Azoundria talk contribs uploaded File:Shamanzs.jpg
• 10:58, 28 January 2023 Azoundria talk contribs created page Doodles NFT Discord Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/doodlesnftdiscordhack.php}} thumb|Doodles NFTThe Doodles NFT are a collection of 10,000 hand-drawn NFT images made by a Canadian artist with the handle "Burnt Toast". The Discord server of the project was hacked on March 31st/April 1st using an exploit in the webhooks for a ticketing system in common use. Viewers of the Discord were promised a great deal on a limited editio...")
• 10:58, 28 January 2023 Azoundria talk contribs created page Bored Ape Yacht Club Discord Ticket Tool Hack (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/boredapeyachtclubdiscordtickettoolhack.php}} thumb|Bored Ape Yacht ClubThe Bored Ape Yacht Club Discord channel was successfully breached through the permissions granted to the commonly used Ticket Tool. This allowed the attacker to post an announcement on the channel, letting users know about a new minting opportunity. Once users clicked the link and signed the tran...")
• 10:58, 28 January 2023 Azoundria talk contribs created page File:Boredapeyachtclub.jpg
• 10:58, 28 January 2023 Azoundria talk contribs uploaded File:Boredapeyachtclub.jpg
• 10:57, 28 January 2023 Azoundria talk contribs created page Ola Finance Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/olafinanceexploit.php}} thumb|Ola FinanceOla Finance offers a service which allows others to launch decentralized lending platforms. There was a reentrancy exploit in the smart contract which was exploited by an attacker to take a significant amount of funds. The attacker was unable to be reached to negotiate the return of the funds, however the Ola Finance developers have...")
• 10:57, 28 January 2023 Azoundria talk contribs created page File:Olafinance.jpg
• 10:57, 28 January 2023 Azoundria talk contribs uploaded File:Olafinance.jpg
• 10:57, 28 January 2023 Azoundria talk contribs created page Axie Infinity Ronin Bridge Unauthorized Treasury Access (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/axieinfinityunauthorizedtreasuryaccess.php}} thumb|Axie InfinityAxie Infinity is a play-to-earn game with $4b in NFT sales. Rather than set up a proper multi-signature wallet, the keys were split between a small number of validators, and additional access was available for someone who no longer needed it. A hacker managed to gain access to 5 of the 9 keys and made off wit...")
• 10:57, 28 January 2023 Azoundria talk contribs created page File:Axieinfinity.jpg
• 10:57, 28 January 2023 Azoundria talk contribs uploaded File:Axieinfinity.jpg
• 10:56, 28 January 2023 Azoundria talk contribs created page Cash.io App Solana Fake Account Exploit (Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/cashioappsolanafakeaccountexploit.php}} thumb|Cash.io AppThe cash.io app is a blockchain stablecoin on the Solana blockchain. Due to a missing validation in the smart contract, a smart hacker was able to drain $52.8m worth of funds from the smart contract. The attacker made the decision that they would return the funds of all accounts that lost less than $100k, and sent thos...")
• 10:56, 28 January 2023 Azoundria talk contribs created page File:Cashioapp.jpg