ETH multisig hack - #CryptoTrading

Published in Reports · Labeled as ·

Some ETH multisig wallets created with parity are being drained right now.

Updates

The bug in Parity 1.5+ has been fixed - see it on github.

Some of the funds were secured by ways of the same hack by a group of white hackers.

Swarm: A swift response from a whitehat hacker group used the same exploit to drain many other project’s parity multisig wallets, in order to protect them from theft. This group was able to save over 377,000 ETH. Unfortunately the 44,055 ETH that was in Swarm City’s wallet is gone.

Black hat hacker wallet address with stolen ether: https://etherscan.io/address/0xb3764761e297d6f121e79c32a65829cd1ddb4d32

White hat wallet address with preserved ether: https://etherscan.io/address/0x1dba1131000664b884a1ba238464159892252d3a

Original article

There is a reason for the selloff, if you are looking for one: Parity 1.5+ security alert.

Some multisig wallets with contracts for ICOs created with certain versions of Parity are vulnerable and getting drained.

So far all ICO money for Edgeless Casino, aeternity and swarm.city is gone. It is 153k ETH which was worth about $32M when the heist started. At the moment it is around $30M. This is where the coins were sent to.

The bug has not been fixed yet so the draining might be going to continue for a while longer, unless money is moved out of vulnerable wallets in time.

The vulnerability is a serious one, allegedly one only needs the public key and certain kind of metadata and that is enough to regenerate the wallet.

Category: Reports · Label: · Author: Karlvonbahnhof (contact author)

 

Last added to Crypto Airdrops, Bounties & Opportunities
Airdropped Token or Opportunity Airdrop Date About the airdrop Link
Phemex $60 Deposit Bonus Reward (+$20 Trading Reward) Open The crypto derivative platform Phemex gives away $60 USD bonus for deposit over specific amounts. The minimum deposit is 0.2 BTC or 2k USDt or 10 ETH or 10k XRP or 500 LINK. Additional bonuses are available for making a trade at spot and contract markets. All bonuses here
Bitfinex KSM Staking Launched 25 Feb Bitfinex opened staking of Kusama tokens with expected staking rewards of ~8% p.a. To start staking KSM, deposit your tokens into your exchange wallet on Bitfinex, or buy the tokens on the exchange. First payout will arrive on 3rd March. sign up with fee discount
DOT and GRT trading fee discount (reliable exchange, easy KYC) Until 9 March Polkadot and The Graph trading has been enabled on the Aussie exchange Independent Reserve in fiat pairs with AUD, NZD, SGP and USD. (International deposits available, KYC individual). The trading fee is 0.1% flat for accounts without premium or volume discount for the first two weeks of trading. info
Pulse Network Reward Competition Until Mid March Pulse network is opening a competition where the most active social media shills get rewarded from a prize pool of 10k+ USD. Top 50 shills get at least 430 USD worth. info
Staking without KYC on WhiteBit New! WhiteBit opened 17 different staking plans with 9 different currencies to choose from. 40% APR, available to the users without KYC. (Be mindful of risks) sign up
PheMex Twitter Bounty Live Phemex is a crypto derivatives platform (new and therefore not to be trusted too much) that is trying to fill the hole after BitMex. They do not require KYC for now, word of caution. PheMex is trying to build up their Twitter account and promise to give away the total of 1x 10k worth of BTC as well as loads of smaller prizes in gift cards and such, if you help them shill their Twitter handle. Phemex account is needed, sign up with code H7QPW to get welcome bonus. sign up with bonus and view the prizes
Blockchain Space Telegram Bounty Until June 2021 Blockchain Space runs a Telegram activity bounty. The most active users will be paid 50 USDT every 15 days. info
Armor Network Early Mining Opportunity For a few weeks now Armor Network is a fast, anonymous and untraceable cryptocurrency integrated into Telegram ecosystem. No ICO, no premine. Genesis block 21 Jan, mining rewards are still high. WARNING: Right now uses a Telegram wallet, so you don't own the private key. info
Opportunity: DeFi Tokens on reputable exchange with lower fees 14 days after listing The Aussie exchange Independent reserve is listing new DeFi tokens these days. For each of the new markets has the fee reduced to 0.1% for the first 2 weeks. Currently those markets are yearn.finance, Aave and Kyber Network Crystal. sign up
Earn YoBit's YoDefi tokens Live YoBit set up their own defi project for liquidity on the exchange. The exchange pays out 777 YoDefi Tokens proportionally for all users every 10 mins. sign up