Hacker Drains $5 Million from Loopring Wallets Using Guardian Service Exploit

2024-6-10 13:00

On Sunday, Loopring, the Ethereum-based ZK-rollup protocol, experienced a major security breach. This incident resulted in losses reaching millions of dollars.

The attack targeted the Guardian wallet recovery service, exploiting a vulnerability in the two-factor authentication (2FA) process.

Loopring Collaborates with Experts and Authorities After the Hack

Loopring’s Guardian service lets users designate trusted wallets for security tasks, such as locking a compromised wallet or restoring one if the seed phrase is lost. The hacker bypassed this service, initiating unauthorized wallet recoveries with a single guardian.

By compromising Loopring’s 2FA service, the hacker impersonated the wallet owner. This allowed the hacker to gain approval for the recovery process, reset ownership, and withdraw assets from the affected wallets. The exploit mainly affected wallets that lacked multiple or third-party guardians.

Read more: 9 Crypto Wallet Security Tips To Safeguard Your Assets

Loopring Hacker Wallet Address. Source: Etherscan

The team identified two wallet addresses involved in the breach. On-chain data indicates one wallet drained approximately $5 million from the compromised wallets, which have now completely swapped to Ethereum (ETH).

Loopring explained that they are collaborating with Mist security experts to determine how the hacker compromised their 2FA service. They have also temporarily suspended Guardian-related and 2FA-related operations to protect users, which stopped the compromise.

“Loopring is working with law enforcement and professional security teams to track down the perpetrator. We will continue to provide updates as soon as the investigation progresses,” it added.

The incident occurred after crypto market data aggregator CoinGecko was victim to a data breach via its third-party email service provider, GetResponse. On June 5, the hacker compromised the account of a GetResponse employee and exported nearly 2 million contacts from CoinGecko’s account.

This attacker then dispatched 23,723 phishing emails using the account of a different GetResponse client. The malicious actors didn’t use CoinGecko’s domain to send harmful emails.

CoinGecko further assured its users that the hacker did not compromise their accounts and passwords despite the breach. However, the leaked data did include users’ names, email addresses, IP addresses, and the locations where emails were opened.

Read more: Top 5 Flaws in Crypto Security and How To Avoid Them

CoinGecko has advised users to be vigilant in response to the breach, especially when receiving emails purporting to offer airdrops. The platform also urged users to avoid clicking links or downloading attachments from unexpected emails and adhere to recommended security measures.

The post Hacker Drains $5 Million from Loopring Wallets Using Guardian Service Exploit appeared first on BeInCrypto.

Similar to Notcoin - Blum - Airdrops In 2024

origin »

Hacker Gold (HKG) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Доступно / Всего 0 HKG

wallets service loopring hacker million guardian exploit

wallets service → Результатов: 126


Ledger Unveils New White Paper, 100% Secure Recovery Service For Crypto Investors

Ledger, the company behind popular cryptocurrency hardware wallets, has taken another step towards transparency and open-sourcing its development by publishing the Ledger Recover White Paper.  The White Paper details the technical specifications of Ledger Recover, a service that will allow users to back up and restore their Ledger device’s Secret Recovery Phrase. Related Reading: Canada […]

2023-6-22 00:00


Shiba Inu Sees Outflow Of $270 Million From Crypto.com, Bullish Sign?

Data shows Shiba Inu worth about $270 million has exited the wallets of Crypto. com, something that may turn out to be bullish for the meme coin. Massive Amount Of Shiba Inu Has Exited Crypto. com As per data from the cryptocurrency transaction tracker service Whale Alert, six large SHIB transfers have been spotted on the Ethereum blockchain during the last few hours.

2023-3-21 18:30


Фото:

Lithuania to Ban Anonymous Wallets As Government Tightens Crypto Restrictions

Amid the geopolitical tensions, institutions within the European Union have been expediting processes to regulate cryptocurrencies. This is “in consideration of the increasing number of the crypto asset and service providers across Europe, global financial challenges, increased money laundering activities, and possible financing of terrorism associated with virtual currencies”, according to the Lithuanian government.  Against this […]

2022-6-12 22:27


Google Pay hires former PayPal executive to expand crypto services

According to Bloomberg, Google Pay, one of the leading digital wallets for payments, has hired former Paypal executive Arnold Goldberg, in a bid to expand and accelerate its crypto operations.   Goldberg will be responsible for heading Google’s payment division to expand the firm’s financial service domain which also includes cryptocurrency-related services.

2022-1-20 13:45


Фото:

LetsExchange Extends Its Crypto Swap Ecosystem With New Tools and Partnerships

Cryptocurrency exchange service LetsExchange has expanded its B2B toolset to facilitate the global spread of instant crypto swap functionality across numerous platforms. This ecosystem enables crypto users to exchange their digital assets without restrictions through the interface of exchange aggregators, cryptocurrency wallets, and even media outlets of their choice. With the addition of new B2B […]

2021-12-8 17:32


All About The New Ukrainian Unicorn Weld Money And The WELD Token Sale

What is Weld Money about? Firstly, it’s the first cryptocurrency card service managed to sign agreements on the card-issuing with the CIS region’s banks and regulatory authorities. Speaking more detailed, it’s an issuer of a fiat Visa card which can be easily connected to any crypto exchanges and wallets storing digital assets and make purchases […]

2021-10-12 22:07