Binance CEO Changpeng Zhao announced that the crypto exchange had paused withdrawals linked to a recent attack on Ankr.
"Initial analysis is developer private key was hacked, and the hacker updated the smart contract to a more malicious one," wrote Zhao. "Binance paused withdrawals a few hours ago. Also froze about $3m that hackers move to our CEX."
Ankr is a distributed node operator for proof-of-stakeproof-of-stake networks, letting users stake their tokens easily without having to buy the necessary hardware.
Possible hacks on Ankr and Hay. Initial analysis is developer private key was hacked, and the hacker updated the smart contract to a more malicious one. Binance paused withdrawals a few hrs ago. Also froze about $3m that hackers move to our CEX.
It was hacked in the early hours of Friday, with the attacker leveraging the smart contract for the aBNBc token that allowed them to create an infinite amount of this token. This token represents a staked version of Binance's BNB token that earns rewards on Ankr. The token's price has collapsed 99.5% since the attack, according to CoinGecko.
The number of tokens created is unclear, but some reports indicate that they were able to mint as much as 60 trillion aBNBc tokens.
The attacker swiftly began to bridge USDC off BSC, moving to Ethereum chain initially using deBridge, and also sending 900 BNB to Tornado Cash.
They swapped many of these tokens for the stablecoin USDC and began moving them off of the Binance Smart Chain and onto Ethereum.
Ankr did not immediately respond to Decrypt's request for comment.
Ankr responds to attack
The Ankr team confirmed that it had been robbed of roughly $5 million in BNB. It also announced a proposal to make affected users whole by reissuing a new token called ankrBNB which would be distributed to pre-hack aBNBc holders.
3/ Additionally, Ankr will purchase 5m worth of BNB and use this to compensate in totality the liquidity providers that have been affected by the exploit due to the drainage of the liquidity pool.
Ankr would also buy $5 million in BNB tokens to compensate liquidity providers.
Today's attack, though far from the largest, puts 2022 closer to becoming one of the most lucrative years for hackers. According to crypto sleuthing firm Chainalysis, more than $3 billion has already been stolen from various crypto protocols.
Last year, the total amount stolen was an all-time high of $3.2 billion.
Daily Debrief Newsletter
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
Strive Asset Management is still pushing GameStop to buy as much Bitcoin as it can, and as quickly as possible. But there is ongoing debate within the company about how much Bitcoin GameStop is willing to buy, Strive CEO Matt Cole told Decrypt on Thursday.
“You should expect that they're going to buy some Bitcoin,” Cole said. “But I don’t think it’s decided how much they will go in that direction.”
The video game retailer announced a month ago that it could start purchasing Bitcoin as a treasury...
Multiple victims have been attacked by what appears to be a North Korean campaign that targets cryptocurrency developers using fake U.S. companies.
According to a Reuters report, two fake companies, Blocknovas LLC and Softglide LLC, were created by North Korean cyber spies to infect developers in the crypto industry with malicious software.
🚨 NEW THREAT REPORT: Contagious Interview (DPRK) Launches a New Campaign Creating Three Front Companies to Deliver a Trio of Malware: BeaverTail, Invisible...
Investment firm RockawayX has successfully secured $125 million for a new early-stage venture capital fund, intended to support crypto-focused communities, particularly those centered around Solana.
The investment firm plans to direct its newly raised funds toward discovering and financing projects that enhance the growth of the Solana ecosystem, recognized as the second-largest Layer 1 by total value locked, according to a statement by RockawayX.
“Rather than investing in more L1s, we focused...