arbitrageur

ChainCatcher news, the security team Slow Mist tweeted that the stablecoin trading project Platypus on the Avalanche chain has been attacked again. Due to the oversight of the price difference between the two pools during token exchange via CoverageAratio, users were able to deposit USDC and then withdraw more USDT for arbitrage. Arbitrageurs profited approximately 50,000 USDC in this manner.

ChainCatcher message, according to monitoring by PeckShield, the address starting with 0x0680 acquired 13,000 staked APE after purchasing BAYC #9061 and transferred them to the address starting with 0x945B.PeckShield stated that this occurred because if a user stakes APE into the NFT pool, selling the NFT will cause the ownership of APE to transfer simultaneously. (source link)

ChainCatcher message, according to PeckShield detection data, an arbitrageur (address starting with 0x8237) borrowed 90 ETH from the DYDX platform using a flash loan and purchased BAYC #1633, while also acquiring 10,000 ApeCoin staked under that NFT. The arbitrageur then exchanged the obtained ApeCoin for approximately 32.68 ETH and sold BAYC #1633 for 65 ETH.It is reported that if users stake APE in the NFT pool, once the NFT is sold, users will simultaneously lose ownership of the staked APE. Previously, PeckShield detected an arbitrageur who profited 6 ETH by purchasing BAYC #6762 and then selling the staked APE. (source link)

According to ChainCatcher news, monitoring by PeckShield indicates that an arbitrageur borrowed 82 ETH from dYdX to purchase BAYC #6762, thereby acquiring its staked 6400 APE. The arbitrageur sold the APE for 20 ETH and later sold BAYC #6762 for 68 ETH.It is reported that Twitter user @Degentraland stated that users who sell NFTs after staking APE in the NFT pool will lose their staked APE. NFT markets (such as Opensea, blur_io, etc.) should display relevant reminders on their user interfaces. (source link)

ChainCatcher message, PeckShield stated on Twitter that a community contributor discovered that an address starting with 0x9bae profited approximately $3.5 million through an Ankr vulnerability, and has transferred the profit funds, approximately 1.87 million BUSD and 1.63 million USDC, to Binance. (Source link)

ChainCatcher news, PeckShield stated on Twitter that the arbitrage address (starting with 0x8d11) that profited over 15 million dollars from the attack incident via Ankr has transferred approximately 15.5 million BUSD and about 200,000 USDC to Binance. (Source link)

According to ChainCatcher news and Lookonchain data, during the GALA attack incident, a SmartMoney address arbitraged nearly 6.5 million dollars. Twenty minutes after the GALA attack, this SmartMoney address began purchasing GALA from the PancakeSwap pool, acquiring a total of 406 million GALA at a cost of only 120,380 dollars. Subsequently, it sold 21.1 million GALA on Binance at a unit price of 0.032 dollars, and sold 385.8 million GALA on Huobi at a unit price of 0.015 dollars, resulting in a profit of nearly 6.5 million dollars, even exceeding the profits of the attacker. (source link)

ChainCatcher message, Web3 multi-chain wallet BitKeep has called out the hackers who previously attacked BitKeep Swap through on-chain messages, urging the hackers and imitation arbitrageurs to respond and return the stolen funds within 24 hours. It is understood that, with the support of security agencies and business partners, BitKeep has obtained key identity information about the hackers. Previously, a public letter was issued requesting the hackers and imitation arbitrageurs to negotiate the return of the stolen funds, offering 5% of the stolen funds as a vulnerability bounty/refund reward; otherwise, they will assist and join the affected users in legal action.According to previous reports, on October 18, BitKeep Swap was attacked by hackers, and BitKeep immediately announced full compensation and collaborated with security agencies such as SlowMist for security upgrades. It is reported that regarding the compensation work, all users except for a very few who have not claimed compensation have completed the compensation; the security upgrade of BitKeep Swap is ongoing, and the Swap function on BNB Chain has now been restored.