Socket, the interoperability protocol that provides uninterrupted connection between blockchains, was subjected to a $3.3 million cyber attack.
socket protocol January 17 early in the day $3.3 million witnessed a hacking incident in which worth of cryptocurrencies were stolen. While the hackers who attacked the Bungee bridge of the protocol managed to steal millions in a short time, the team quickly intervened and stopped the affected contracts.
According to the data, a single user suffered the greatest damage from the attack. 600 thousand dollars lost. Among the stolen assets Ethereum (ETH) worth $2.9 million, Polygon (MATIC) worth $138 thousand, wBTC worth $123 thousand, weETH worth $109 thousand And DAI worth 13 thousand dollars took place.
Made by the team shortly after the attack in the statementIt was stated that they experienced an attack that gave infinite validation to the Socket contract:
It had a security incident that caused an infinite number of validations to socket contracts and impacted wallets. We identified the issue and paused the affected contracts. We are working on the situation and will keep you informed of any updates.
About subject in the statement blockchain security firm PeckShieldthe malware in question It was added to socket contracts about 3 days ago. he stated. The attack basically occurs during user login. without missing verification originates from Security company stating that problematic Users who approve the SocketGateway agreement He emphasized that his assets were stolen.
Problem solved
The Socket team managed to solve the problem in a short time and prevent further losses. The situation is completely under control, The network is active again And Work has been initiated to refund users the funds they lost. stated.
The team detects users whose crypto money was stolen. against phishing scams that want to abuse the process He warned them to be cautious:
The socket is now operational again. The affected contract has been paused and the damage has been fully contained. Bridging of BungeeExchange and most of our partner frontends is ongoing. We continue our efforts to repay the funds. A detailed autopsy and next steps will be released shortly. Be wary of phishing scammers and double check before making a transaction.