Verified blockchain security incidents with original evidence and historical event dates.
Description of the event: The attacker co****op launched continuous attacks on the EOS quiz game contract xlo*****io and has already profited hundreds of EOS. After preliminary analysis, the attacker used the logic defect of the game contract by directly invoking the transfer method, and multiple accounts coordinated to carry out the attack.
Description of the event: The attacker launched continuously attacks on the OnePlay, getting almost all EOS of the game contract. And use the same attack mean to bet the game token ONE, profit nearly one million game tokens, and then transfer to the newdex exchange for sale.
Description of the event: Hackers launched continuous attacks on the EOS quiz game EOS Happy Valley, and they have profited hundreds of EOS. The game party has transferred the account balance away. Attackers still use transaction crowding out attacks. To completely fix this vulnerability, DApp developers should remove controllable variables such as account balance or time factors to participate in random number generation.
Description of the event: Tracking the blacklist account gm3dcnqgenes found that its associated account newdexmobapp received 2.09 million EOS, and has now transferred 50,000 EOS to its associated account guagddoefdqu. And in batches of hundreds to thousands of EOS each time, transferred to the stock exchange account (huobideposit), and the remaining 2.04 million EOS, has been dispersed to ftsqfgjoscma, hpbcc4k42nxy, 3qyty1khhkhv, xzr2fbvxwtgt, myqdqdj4qbge, Shprzailrazt, qkwrmqowelyu, lmfsopxpr324, lhjuy3gdkpq4, lcxunh51a1gt, geydddsfkk5e, pnsdiia1pcuy, kwmvzswquqpb, etc., there is the possibility of further turning to the exchange.
Description of the event: Coinbin, a south Korean cryptocurrency exchange, is filing for bankruptcy with losses equivalent to more than $26 million after its debts grew after employees embezzled money.
Description of the event: Gameboy, a EOS game was attacked. Attacker cont****inop deployed a contract and attacked by calling launch function. According to the analysis of SlowMist security team and confirmed with project side by communication.The project side wrongly add a controlled seed in random algorithm which lead the attack.
Description of the event: The attacker launched an attack on the EOS game EOSPlaystation.
Description of the event: The attacker deploys the attack contract rep******net to attack the project party contract windiceadmin.
Description of the event: The attacker deploys the attack contract con******nop and combines multiple accounts to attack the project contract eosreeladmin.
Description of the event: Canada's largest cryptocurrency exchange is seeking creditor protection after losing about $190 million worth of cryptocurrency after the sudden death of its founder and chief executive in December.
Description of the event: The attacker deployed multiple attack contracts to attack the EOS game FASTWIN.
Description of the event: The attacker launched continuous attacks on the EOS game EOSlots.
Description of the event: The attacker is the same batch of accounts that previously attacked BETX.
Description of the event: This is the third attack on the contract, not a transaction congestion attack, but the real purpose of the attack is the transaction rollback attack.
Description of the event: Similar to the way EOSABC was attacked two days ago, the problem has not been fixed.
Description of the event: The attacker launched continuously attacks on the TGON.
Description of the event: The attacker controlled multiple accounts to launch continuously attacks on the EOSlots.
Description of the event: It is consistent with the previous principles of attacking EOS.Win, FarmEOS, etc., but the technique has changed.
Description of the event: LocalBitcoins has detected a security vulnerability - an unauthorised source was able to access and send transactions from a number of affected accounts.It was related to a feature powered by a third party software, and stop the attack. At the moment, we are determining the correct number of users affected - so far six cases have been confirmed.
Description of the event: It is consistent with the previous principles of attacking EOS.Win, FarmEOS, etc., but the method has changed. The attacker controls multiple accounts to cooperate to complete the transaction congestion attack.