kilo

According to Vietnam's Youth Newspaper, the Ministry of Public Security of Vietnam recently held a press conference to report the latest investigation results of the ONUS cryptocurrency platform fraud case. More than 350 kilograms of gold and silver have been seized, transactions involving 8 properties valued at 20 trillion Vietnamese dong have been frozen, and transactions of over 300 involved bank accounts have been suspended.On March 23 of this year, the police filed criminal charges against 8 defendants, accusing them of using computer networks and telecommunications networks to commit property appropriation and money laundering. Since 2018, the individuals involved have taken advantage of the public's lack of understanding of cryptocurrency, creating digital accounts through applications and packaging them as virtual currency. They established trust and attracted investment through circular buying and selling among affiliated companies, thereby committing fund appropriation, with a total sale of cryptocurrency valued at over 70 trillion Vietnamese dong from 2018 to 2021.The case involves numerous individuals and users, with approximately 5 million user accounts opened. The police have received over 2000 reports from citizens. The public security authorities are investigating the possible accomplice responsibilities of KOLs and other internet celebrities and continue to make every effort to recover the embezzled funds.

According to Jinshi, citing Iranian media Fars News, the United States has made the unfreezing of up to 25% of Iran's frozen assets a condition, and also demands that Iran must hand over 400 kilograms of enriched uranium. Sources say that the United States has set conditions in its response to Iran, requiring Iran to operate only one nuclear facility, and the United States has made it clear that it will not pay any compensation to Iran.

According to Jinshi News, Venezuela's state-owned mining company has signed a multi-million dollar agreement to sell up to 1,000 kilograms of gold, which will flow to the U.S. market.

ChainCatcher message, according to Scam Sniffer, the Discord invite link for the Kiloex project discord.gg/kiloex has expired and has been maliciously hijacked by scammers. Currently, the project information on Coingecko and CoinMarketCap still links to the hijacked invite address, and Kiloex's historical tweets also contain this malicious link. According to reports, users have already suffered asset losses as a result.Attackers steal user assets through phishing signatures and use a fake "Collab Land" bot to carry out scams. In addition to Kiloex, several other projects, including Verisense Network, have also had their Discord invite links attacked in a similar manner. Scammers systematically occupy expired custom invite links, turning old links in project documentation, websites, and historical tweets into attack tools.

ChainCatcher message, according to @ai_9684xtpa monitoring, the BNB Chain Foundation's buying address purchased $25,000 each of WOD, KILO, and KOMA tokens.

ChainCatcher news, according to official sources, the decentralized derivatives trading platform KiloEx announced today that it has completed security audits and system repairs, and the platform is now officially back in operation.Previous report, KiloEx has announced solutions for affected users, committing to fully compensate traders for additional losses incurred due to this incident, and will launch a 30-day 10% extra yield staking reward program after the platform restarts, as well as a "first trade reward" program.

ChainCatcher news, according to KiloEx announcement, for the security incident that occurred between April 14, 18:27 to 19:40 UTC, the platform will launch differentiated compensation measures for affected users. Traders will receive full compensation for reduced profits or increased losses during the downtime, and it is recommended to close positions as soon as possible after the platform resumes; Hybrid Vault stakers will not lose their principal and earnings, and can participate in the 10% annualized additional earnings activity from April 24 to May 24; VIP users will receive a level +1 reward and a 30-day VIP protection period.

ChainCatcher news, according to an announcement from KiloEx, the KiloEx platform will gradually resume all trading and deposit functions on supported chains starting at 12:00 UTC on April 24, with the entire platform expected to be fully operational by 13:00 UTC on April 24.The SlowMist security audit report and the compensation plan for users affected by the recent KiloEx security incident will be announced before the platform restarts.

According to ChainCatcher's message, KiloEx stated in a post that the root cause analysis and summary of the hacking incident revealed that the incident was caused by its smart contract's TrustedForwarder contract inheriting OpenZeppelin's MinimalForwarderUpgradeable but failing to override the execute method, which allowed the function to be called arbitrarily.The attack occurred between April 14, 18:52 and 19:40 (UTC), with the hacker deploying attack contracts across multiple chains including opBNB, Base, BSC, Taiko, B2, and Manta. After negotiations, the hacker agreed to retain 10% of the bounty and has returned all stolen assets (including USDT, USDC, ETH, BNB, WBTC, and DAI) to the multi-signature wallet designated by KiloEx.

ChainCatcher news, according to official information, KiloEx announced that its partner SlowMist has prepared two audit plans:Complete audit by SlowMist before KiloEx goes live again: This audit is expected to take about 45 days to ensure comprehensive security guarantees.Preliminary permission audit by SlowMist: SlowMist will first audit the permission mechanism of the protocol to prevent similar attack incidents from occurring. KiloEx will decide whether to go live again based on the results of the preliminary permission audit, and then SlowMist will continue with a comprehensive audit of the protocol logic and economic model. The required time is still being assessed, but it will be significantly shorter than 45 days.KiloEx understands the community's urgent feelings about going live again, so it has decided to choose plan two—starting with the initial permission audit. Once the audit results are out, KiloEx will announce the timeline for going live again as soon as possible.

ChainCatcher message, KiloEx announced that they will work with the SlowMist team to provide a post-incident summary, which will disclose more details and future security plans. Thanks again to Zhao Changpeng, Binance, and BNB Chain for their immediate assistance in establishing the initial war room, contacting security companies and partners to jointly address this incident.

ChainCatcher message, after the Binance security team assisted in recovering the stolen funds from KiloEx, some community members suggested that Binance disclose specific support details regarding the incident to enhance community trust in the ecological security. In response, Zhao Changpeng stated: "Some details in the middle can help with the handling of future security incidents; if everything is fully disclosed, hackers might learn to avoid them. We must respect the opinions of all parties involved. Everything else should be transparent."

ChainCatcher news, according to the official announcement from KiloEx, the platform has successfully recovered all stolen assets from this security incident, involving an amount of approximately 5.5 million USD. They are currently cooperating with judicial authorities and third-party experts to advance the formal case closure process.At the same time, a 10% bounty will be awarded to the white hat hackers as per the agreement. KiloEx stated that it will not pursue further legal responsibilities and is committed to continuously strengthening the platform's security construction.

ChainCatcher news, according to PeckShieldAlert, the attacker address marked in the KiloEx attack incident has returned approximately 5.5 million dollars worth of crypto assets to KiloEx.

ChainCatcher news, according to PeckShield monitoring, the address marked by the KiloEx attacker has returned approximately 1.4 million USDT to KiloEx.

ChainCatcher news, according to official information, KiloEx announced on April 15 regarding the progress of the hacking incident that it has reported to the Hong Kong police and filed a case, and is cooperating with the Criminal Investigation and Cybersecurity departments for investigation. Some information related to the hackers has been obtained. Meanwhile, KiloEx has collaborated with the security company SlowMist to submit a detailed incident report, which will be publicly released when the time is right.The security vulnerability has been fixed, and there is currently no risk of position liquidation. All positions will be settled at the snapshot price before the incident. KiloEx is formulating a compensation plan and raising funds, and the Vault function will gradually resume after the plan is implemented, ensuring the safety of user funds.The hackers have not yet moved the stolen funds. KiloEx has repeatedly sent messages on-chain requesting the return of 90%, but has not received a response so far. The related addresses have been jointly blocked in coordination with multiple DeFi protocols and CEX.In response to rumors about internal involvement, KiloEx solemnly clarifies: the police and SlowMist have fully intervened in the investigation and obtained all internal data. If there are internal issues, the case will not be filed.

ChainCatcher message, KiloEx stated on social media that, with the assistance of law enforcement agencies, cybersecurity agencies, and several trading platforms and cross-chain bridge protocols, they have obtained key information regarding the hacking activities. They are currently monitoring the activities of certain addresses in real-time and are prepared to freeze the stolen funds at any time. To resolve this matter, the following proposal is made: return 90% of the stolen funds to the platform address, allowing the hacker to keep 10% as a white hat bounty, and a statement will be released on social media acknowledging the cooperation and that no further action will be taken.

ChainCatcher message, Slow Mist Technology's Chief Information Security Officer 23pds tweeted that "The root cause of the KiloEx attack lies in the serious vulnerabilities in the price oracle access control. Simply put, the oracle should have its price information updated by trusted entities, but due to the lack of necessary permission restrictions, attackers were able to bypass the verification mechanism and arbitrarily tamper with asset prices, thereby manipulating the contract logic."

ChainCatcher message shows that the on-chain contract platform KiloEx address has been hacked, resulting in a loss of approximately 7.4 million USD, involving assets from multiple chains such as BNB and Base.

ChainCatcher message, according to official news, the perpetual contract DEX KiloEx announced that its treasury has been attacked, and the situation is currently under control.The KiloEx platform's functions have been suspended, and the team is working with security partners to track the flow of funds and plans to launch a bounty program.KiloEx is analyzing the attack vector and affected assets, while collaborating with ecosystem partners to attempt to recover the funds. A complete report will be released in the coming days.