Scan to download
BTC $66,055.82 -1.99%
ETH $1,834.83 -4.46%
BNB $627.45 -5.65%
XRP $1.23 -1.17%
SOL $73.68 -4.05%
TRX $0.3341 -1.10%
DOGE $0.0927 -2.96%
ADA $0.2101 -3.70%
BCH $248.55 -12.70%
LINK $8.33 -3.39%
HYPE $73.03 +1.07%
AAVE $75.33 -1.00%
SUI $0.8284 -0.87%
XLM $0.2215 -0.64%
ZEC $607.59 -1.63%
BTC $66,055.82 -1.99%
ETH $1,834.83 -4.46%
BNB $627.45 -5.65%
XRP $1.23 -1.17%
SOL $73.68 -4.05%
TRX $0.3341 -1.10%
DOGE $0.0927 -2.96%
ADA $0.2101 -3.70%
BCH $248.55 -12.70%
LINK $8.33 -3.39%
HYPE $73.03 +1.07%
AAVE $75.33 -1.00%
SUI $0.8284 -0.87%
XLM $0.2215 -0.64%
ZEC $607.59 -1.63%

side

Superfortune: The leakage of the attacker's private key rather than address poisoning is not the work of an insider

Superfortune, incubated by Manta, recently released an update on the X platform regarding a security incident, stating that the attack was not carried out by internal personnel and that no team members were involved. The claim about the team secretly selling tokens is incorrect. The team has also not had any contact with Web3Port.The investigation confirmed that the attack was not due to address poisoning, but rather a leak of the signer's private key. The attacker independently held the private key and submitted a transaction with a forged address 43 minutes after the correct transaction. The forged address shares the first and last four characters with the correct address (starting with 0x70AE and ending with 5C15) to disguise itself in the Safe interface preview. The stolen funds are fully traceable and are currently stored in three cold wallets on Ethereum, containing approximately 2784 ETH, along with about 170,000 USDT that were cross-chain transferred out.The attacker also created a large number of counterfeit addresses and sent false transfer events to these addresses using Unicode-forged token symbols in an attempt to confuse tracking. This counterfeit address construction technique is the same as the method used when attacking this project. The attacker had pre-built a large-scale infrastructure, indicating that this was an industrialized operation rather than an opportunistic attack.

DxSale is suspected of "insider theft," with over $7.3 million in LP drained

On-chain security analysis account Eye stated that the BNB Chain project launch platform DxSale is suspected of exploiting a hidden backdoor to siphon off funds from an old liquidity pool locked in 2021, involving over 1,400 LPs and an amount of approximately $7.3 million. The analysis indicates that this attack includes operations such as "silent ownership transfer" and over 80 wallet hops.After the LP was drained, the attack address received over 1,200 BNB (approximately $763,000), with the funds believed to come directly from multiple stolen LP pools. More concerning is that this address had previously been dormant for a long time but has a direct on-chain association with a wallet marked as related to the DxSale team; this address is also one of the important funding inflow addresses for the DxSale smart contract.Subsequently, the attack address transferred about 3,400 BNB (approximately $1.2 million) to multiple wallets and completed the fund transfer through several Binance deposit addresses. Eye stated that if the related accusations are true, it implies that the DxSale team may have reserved a backdoor for the platform years ago and ultimately carried out the attack themselves. They also called for Binance to freeze the related funds, believing that these assets essentially belong to the project investors who had previously financed through DxSale. DxSale was one of the most well-known launchpads and LP locking infrastructure on the BNB Chain, with projects like SAFEMOON having used its services.

The Supreme Court: Will formulate judicial interpretations on civil compensation related to insider trading and market manipulation, and study adjudication rules for new types of cases such as virtual currencies

According to CCTV News, the State Council Information Office held a series of themed press conferences on "Starting the 14th Five-Year Plan," introducing the situation regarding "Promoting Comprehensive Rule of Law." At the press conference, Liu Guixiang, a deputy-level full-time member of the Supreme People's Court Judicial Committee and a second-level chief judge, stated that in-depth research on new case adjudication rules for virtual currencies, cross-border finance, and other new types of cases should be conducted. Judicial interpretations regarding civil compensation related to insider trading and market manipulation should be formulated as soon as possible to ensure the stable operation of the capital market and effectively safeguard the legitimate rights and interests of small and medium-sized investors.In response to the new business formats of the digital economy, normative documents regarding judicial protection of artificial intelligence cases and data ownership should be researched and developed. The adjudication rules concerning data ownership, data transactions, AI generation, and other aspects should be improved to promote the deep integration of digital technology with the real economy, assist in perfecting the foundational institutional system for data elements, and promote the construction of an integrated data market that is open, shared, and secure.
app_icon
ChainCatcher Building the Web3 world with innovations.