Hacked target: Josh Jones
Description of the event: Josh Jones, founder of Bitcoin Builder and Mt.Gox's second largest creditor, has had $45 million worth of digital currency stolen.
Amount of loss: $45,000,000Attack method: SIM card is hacked
HACKED ARCHIVE
Hacked Event Broadcast
Verified blockchain security incidents with original evidence and historical event dates.
Live source archive
Hacked target: bZx
Description of the event: bZx was attacked again with an estimated loss of $645,000 of ETH
Amount of loss: $645,000Attack method: Oracle Attack
Hacked target: VBITEX
Description of the event: VBITEX platform was hacked, resulting in malicious manipulation of platform data and theft of virtual assets.
Attack method: Unknown
Hacked target: FCoin
Description of the event: The FCoin exchange claimed that due to funding difficulties, the fund reserves could not be redeemed for user withdrawals, and the estimated amount of funds that could not be redeemed was between 7,000-13,000 BTC.
Attack method: Scam
Hacked target: bZx
Description of the event: DeFi lending protocol bZx exploited, may lose up to $350,000.
Amount of loss: $350,000Attack method: Oracle Attack
Hacked target: IOTA
Description of the event: IOTA has shut down its entire network this week after hackers exploited a vulnerability in the official IOTA wallet app to steal user funds.Estimated loss of 850000 MIOTA (valued at us $2.3 million).
Amount of loss: 8,550,000 MIOTAAttack method: Application Vulnerability
Hacked target: Altsbit
Description of the event: The Italian cryptocurrency exchange Altsbit was hacked. As of now, the value of stolen Bitcoin and Ether is about 70,000 U.S. dollars. The website stated that it will be closed after partial refund of client funds.
Amount of loss: $ 70,000Attack method: Wallet Stolen
Hacked target: LuckLambo104
Description of the event: The hacker at the beginning of the TKnzni address continued to launch a transaction rollback attack on the LuckLambo104 contract address beginning with TGsyJF by creating an attack contract, and profited 6,588 TRX. The contract was created at 23:00 on February 01 and was attacked the day after it went live. The current contract balance has returned to zero.
Amount of loss: 6,588 TRXAttack method: Roll back attack
Hacked target: Bitcoin Gold
Description of the event: Last week, BTG encountered two 51% computing power attacks, and both recharge transactions to exchanges were cancelled, involving about 1,900 BTG and 5267 BTG, which was close to 90,000 US dollars.
Amount of loss: $ 90,000Attack method: 51% attack
Hacked target: Electrum
Description of the event: Electrum suffers from "Update Phishing" theft. (The "Update Phishing" attack continues, and the older version (less than 3.3.4) is still under threat.)
Amount of loss: 2,000 BTCAttack method: Phishing attack
Hacked target: NULS
Description of the event: The well-known public chain NULS suffered a hacker attack and lost nearly $480,000 worth of NULS tokens. The SlowMist security team analyzed and found that the reason for the attack was that there was a loophole in the NULS transaction signature verification algorithm. The hacker bypassed the signature verification by using a carefully constructed transaction, transferred the tokens of the team account, and then some tokens were thrown into the market. , At present, major exchanges have suspended the deposit and withdrawal of NULS. After the attack, the official urgently checked the problem, carried out problem repair and code testing, and then released a new version of the program, and scheduled a hard fork at the height of 878000 (about noon on December 25th, Beijing time) to freeze other tokens that have not flowed into the market.
Amount of loss: $ 480,000Attack method: Vulnerability in transaction signature verification algorithm
Hacked target: VeChain
Description of the event: The VeChain Foundation, a non-profit organization supporting the VeChain public blockchain platform, announced that their repurchase address was leaked at 12:27 PM Eastern Time on Friday (ie 1:27 AM Beijing time) . The company stated in the announcement: “The security breach is most likely due to the improper behavior of a member of our finance team who created a repurchase account without fully complying with the standard procedures approved by the foundation, and due to human error. , Our audit team did not find such inappropriate behavior. We want to emphasize that the incident has nothing to do with the actual standard process or the effectiveness of VeChain’s hardware wallet solution."
Amount of loss: $ 6,500,000Attack method: Human error
Hacked target: Tron Lounge
Description of the event: The hacker at the beginning of the TFNsSk address initiated a transaction rollback attack on the Tron Lounge DApp contract beginning with TRON TR3n2D through a self-created contract, and has made a profit of 54,653 TRX so far.
Amount of loss: 54,653 TRXAttack method: Roll back attack
Hacked target: Vertcoin
Description of the event: The chief maintainer of Vertcoin James Lovejoy revealed in an attack report on December 2 that a malicious entity targeted the cryptocurrency exchange Bittrex to manipulate the Vertcoin blockchain. The hacker paid at least $440 to attack VTC, but fortunately Vertcoin was not affected.
Attack method: 51% attack
Hacked target: Upbit
Description of the event: South Korean exchange Upbit 342,000 ETH worth about $50 million was stolen. The exchange’s alleged theft occurred while assets were being transferred between hot and cold storage wallets, leading some to speculate that the incident may have been an internal job rather than an external breach. On January 14, 2025, the United States, Japan, and South Korea mentioned in a joint statement that the Upbit theft was attributed to DPRK.
Amount of loss: 342,000 ETHAttack method: Wallet Stolen
Hacked target: Dice
Description of the event: The hackers launched a trade rollback attack on TRON's Dice contracts through self-created contracts, and have gained 18,808 TRX to date.
Amount of loss: 18,808 TRXAttack method: Roll back attack
Hacked target: GateHub
Description of the event: Gatehub Crypto Wallet Data Breach Compromises Passwords of 1.4M Users.
Attack method: Information Leakage
Hacked target: VinDAX
Description of the event: Vietnamese cryptocurrency exchange VinDAX has been hacked, losing at least $500,000 in cryptocurrency.
Amount of loss: $ 500,000Attack method: Wallet Stolen
Hacked target: BetHash
Description of the event: BetHash's betting game mechanism allows players to guess the ratio of the number between 0-100 and the random number given by the system to win the bonus of the corresponding odds. The smaller the bet number, the greater the odds. Every time a player makes a bet, the dicereceipt() function of the BetHash smart contract will be called to notify the player's account. At this point, the hacker can control the malicious program to hijack the notification and embed the inline operation to implement the attack. Although the attacker also needs to pay a certain amount of bet for every attack, as long as it keeps 0.1 EOS and is conservative
Attack method: Malicious Code Injection Attack
Hacked target: BitMEX
Description of the event: BitMEX Compromises User Data in Email Gaffe.
Attack method: Information Leakage