KyberSwap, a multichain DEX aggregator, disclosed Thursday that a frontend exploit resulted in the theft of $265,000 in user funds.
KyberSwap told victims of the hack it will compensate any funds lost and offered a 15% bounty for the hacker if all the funds are returned.
The code exploit was initially flagged at approximately 2:30 a.m. EST. KyberSwap gave more details about the exploit in its official notice writing: “We identified a malicious code in our Google Tag Manager (GTM) which inserted a false approval, allowing a hacker to transfer a user’s funds to his address.”
“The script had been discreetly injected and specifically targeting whale wallets with large amounts.” the post further explained.
The exploit was neutralized two hours after the team began investigations, and the team urged users to proceed using its platform with caution.
The 15% bug bounty is contingent on all the funds being returned and the hacker speaking directly with the KyberSwap team.
© 2022. Блоцк Црипто, Инц. Сва права задржана. Овај је чланак доступан само у информативне сврхе. Не нуди се или се не користи као правни, порески, инвестициони, финансијски или други савет.
О аутору
Мике је репортер који покрива блокчејн екосистеме, који је специјализован за доказе без знања, приватност и самосуверену дигиталну идентификацију. Пре него што се придружио Тхе Блоцк-у, Мајк је радио са Цирцле, Блоцкнативе и разним ДеФи протоколима на расту и стратегији.
Source: https://www.theblock.co/post/167308/kyberswap-says-it-will-pay-15-bounty-if-attacker-returns-265k-in-stolen-crypto?utm_source=rss&utm_medium=rss