{"id":574753,"date":"2022-09-02T11:58:14","date_gmt":"2022-09-02T10:58:14","guid":{"rendered":"https:\/\/en.ethereumworldnews.com\/?p=574753"},"modified":"2022-09-02T11:58:25","modified_gmt":"2022-09-02T10:58:25","slug":"kyber-network-exploited","status":"publish","type":"post","link":"https:\/\/en.ethereumworldnews.com\/kyber-network-exploited\/","title":{"rendered":"Kyber Network Exploited for $265,000"},"content":{"rendered":"\n<ul><li>Kyber Network identified and fixed a vulnerability in the front-end.<\/li><li>The attacker managed to steal $265,000 through malicious code that was discreetly inserted into the Google Tag Manager.<\/li><li>The Kyber Network team has promised to reimburse victims.<\/li><\/ul>\n\n\n\n<p>Kyber Network has revealed that it has been the victim of an exploit that saw $265,000 stolen. The team published a blog post saying that it had identified and neutralized an exploit discovered on its front end. All users that have been affected will be reimbursed.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">1\/ \u2757\ufe0fNotice of Exploit of KyberSwap Frontend:<br><br>We identified and neutralized an exploit on the KyberSwap frontend. Affected users will be compensated. We have summarized the details in this thread\u2b07\ufe0f<\/p>&mdash; Kyber Network (@KyberNetwork) <a href=\"https:\/\/twitter.com\/KyberNetwork\/status\/1565421305410686976?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">September 1, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>The team identified that there was something suspicious on September 1, and then identified malicious code in the Google Tag Manager, which inserted a false approval. This allowed the hacker to transfer users\u2019 funds to his address. Once identified, the team disabled the UI to conduct an investigation.<\/p>\n\n\n\n<p>They said that the script had been \u201cdiscreetly injected\u201d and was targeting whales with large holdings. While conducting the investigation, they also <a href=\"https:\/\/blog.kyber.network\/notice-of-exploit-of-kyberswap-frontend-963aa8febd6a\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">recorded<\/a> all the addresses that were affected.<\/p>\n\n\n\n<p>The team provided the list of addresses associated with the attacker. They have asked those with the power to block fund transfers from the attackers\u2019 addresses. They are also calling for any information about the identity of the attacker.<\/p>\n\n\n\n<p>The attack lasted for a total of two hours, as the team was quick to pounce on the suspicious activity. They have asked those who have been affected to contact them over Discord. Th team also provided instructions on how to revoke the malicious approval.<\/p>\n\n\n\n<h2>DeFi Attacks on the Rise<\/h2>\n\n\n\n<p>The attack is yet another to take place on the DeFi market, which has time and again been a major hunting ground for hackers. The DeFi market has lost well over <a href=\"https:\/\/en.ethereumworldnews.com\/crypto-hacks-drained-1-billion-defi-2022\/\" target=\"_blank\" rel=\"noreferrer noopener\">$1 billion<\/a> due to exploits and hacks this year, and that figure does not look like it\u2019s going to reduce any time soon.<\/p>\n\n\n\n<p>Some of the most notable incidents that took place this year are <a href=\"https:\/\/en.ethereumworldnews.com\/binance-invests-150-million-in-sky-mavis-after-600-million-ronin-hack\/\" target=\"_blank\" rel=\"noreferrer noopener\">the Ronin Bridge hack<\/a> and the theft of <a href=\"https:\/\/en.ethereumworldnews.com\/beanstalk-stablecoin-relaunches-four-months-after-getting-hacked-for-nearly-182-million\/\" target=\"_blank\" rel=\"noreferrer noopener\">$182 million<\/a> from Beanstalk. The former incident is believed to be the work of the Lazarus Group, which is linked to North Korea. The Lazarus Group is also reportedly behind the $100 million attack on Harmony Protocol\u2019s <a href=\"https:\/\/en.ethereumworldnews.com\/harmony-horizon-bridge-hacked\/\" target=\"_blank\" rel=\"noreferrer noopener\">Horizon Bridge<\/a>.<\/p>\n\n\n\n<p>DeFi attacks will continue to occur, as it provides ample opportunity to hackers. Teams will have to be doubly careful and audit their smart contracts, and ensure that no frontend exploits exist.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kyber Network identified and fixed a vulnerability in the front-end. The attacker managed to steal $265,000 through malicious code that was discreetly inserted into the Google Tag Manager. The Kyber Network team has promised to reimburse victims. Kyber Network has revealed that it has been the victim of an exploit that saw $265,000 stolen. The team published a blog post saying that it had identified and neutralized an exploit discovered on its front end. All users that have been affected [&hellip;]<\/p>\n","protected":false},"author":52,"featured_media":568721,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[947,2,828],"tags":[48,83,7092,108598,162],"_links":{"self":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/574753"}],"collection":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/users\/52"}],"replies":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=574753"}],"version-history":[{"count":2,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/574753\/revisions"}],"predecessor-version":[{"id":574758,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/574753\/revisions\/574758"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media\/568721"}],"wp:attachment":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=574753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=574753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=574753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}