Binance CEO Says Exchange Recovered $450 Million From the Curve Finance Attack

2 years ago

Following the caller Curve Finance attack, Binance CEO Changpeng Zhao announced that the speech had recovered $450 cardinal from hackers. The decentralized concern (defi) level Curve saw astir $570 cardinal siphoned from the exertion connected August 9.

Binance Boss Says Exchange Froze 83% of the Curve Finance Hack Funds, Domain Provider Says Exploit Was DNS Cache Poisoning

Four days ago, the crypto assemblage was made alert that the Curve Finance beforehand extremity was exploited. Curve fixed the concern but $570 cardinal was removed from the defi protocol. The attackers, however, decided to nonstop the funds to crypto exchanges. Binance CEO Changpeng Zhao (CZ) tweeted astir the exploit the time it happened.

“Curve Finance had their DNS hijacked successful the past hour,” CZ wrote. “Hacker enactment a malicious declaration connected the location page. When the unfortunate approved the contract, it would drain the wallet. Damage is astir $570K truthful far. We are monitoring.” In summation to Binance monitoring the situation, the speech Fixedfloat managed to frost immoderate funds.

“Our information section has frozen portion of the funds successful the magnitude of 112 [ether]. In bid for our information section to beryllium capable to benignant retired what happened arsenic soon arsenic possible, delight email us,” Fixedfloat wrote the time of the hack. Then 3 days aft the hack, connected August 12, CZ explained astatine 1:07 a.m. (EST) that Binance recovered astir 83% of the funds.

“Binance froze/recovered $450K of the Curve stolen funds, representing 83%+ of the hack,” CZ tweeted connected Friday. “We are moving with [law enforcement] to instrumentality the funds to the users. The hacker kept connected sending the funds to Binance successful antithetic ways, reasoning we can’t drawback it,” CZ added.

Curve Finance retweeted CZ’s connection and noted earlier successful the time that the squad has a little study from the domain supplier [iwantmyname.com] and said: “In brief: DNS cache poisoning, not nameserver compromise,” Curve Finance explained portion sharing the report. “No 1 connected the web is 100% harmless from these attacks. What has happened STRONGLY suggests to commencement moving to ENS alternatively of DNS.”

The domain supplier iwantmyname.com’s report confirms Curve’s statements. “It appears that 1 customer’s domain was targeted,” iwantmyname.com’s disclosure study details. “Our outer provider’s hosted DNS infrastructure was seemingly compromised and the DNS records for this domain were changed to constituent to a cloned web server. Further probe unneurotic with the outer supplier indicates that it was DNS Cache poisoning alternatively than immoderate nameservers compromised.”

What bash you deliberation astir Binance recovering $450 cardinal from the Curve Finance hack? Let america cognize what you deliberation astir this taxable successful the comments conception below.

View source