A recent security breach at the crypto liquid restaking platform Bedrock resulted in a loss of around $2 million due to a smart contract vulnerability in its uniBTC vaults.
This exploit was flagged by Web3 security firm Dedaub on September 26, but despite early warnings, Bedrock’s team failed to take timely action before the breach occurred.
The hacker had the potential to steal up to $75 million but only took $2 million. In response to the incident, Bedrock is formulating a reimbursement strategy for affected investors and collaborating with audit teams to recover the lost assets.
They even reached out to the hacker via an on-chain message on Etherscan, offering a reward for the return of the stolen funds, but as of now, there has been no reply.
Meanwhile, other platforms like Shezmu have successfully negotiated the return of stolen funds by offering bounties.
After a similar exploit, Shezmu managed to recover nearly $5 million by agreeing to a higher bounty than initially proposed, illustrating a growing trend of on-chain negotiations following hacks.
An extensive international cybercrime network has been brought down after law enforcement seized 145 domains linked to BidenCash, a notorious online marketplace that thrived on trading stolen credit card data and compromised digital identities.
Hackers in the crypto world are changing course, moving away from exploiting smart contracts and turning their focus toward tricking users directly.
Coinbase is now facing mounting scrutiny after it allegedly sat on a serious data breach for over four months, exposing the personal information of nearly 70,000 users before taking action.
A major security lapse has rocked Taiwan-based crypto exchange BitoPro, which quietly suffered an $11.5 million hack earlier in May but failed to alert users for weeks.