Risk Warning: Beware of illegal fundraising in the name of 'virtual currency' and 'blockchain'. — Five departments including the Banking and Insurance Regulatory Commission
Information
Discover
Search
Login
简中
繁中
English
日本語
한국어
ภาษาไทย
Tiếng Việt
BTC
ETH
HTX
SOL
BNB
View Market
The Fantom Foundation was attacked and its wallet contained management tokens that could mint FTM, preventing a potential loss of $170 million.
2023-11-21 02:27
Odaily News Last month, the Fantom Foundation wallet was hacked, and a $1.7 million bounty was subsequently paid to a security researcher. The unnamed researcher alerted the foundation to the presence of a dormant governance token in the hacked wallet for Fantom’s FTM token contract. If hackers had previously realized that a wallet they controlled contained management tokens, they could have minted FTM tokens directly on Ethereum. Based on the price of the token at the time of the hack, the Fantom Foundation assessed potential losses of $170 million. (DL News) According to previous news in October, according to CertiK monitoring, some wallets on the Fantom Foundation’s Ethereum and Fantom were attacked, and the confirmed losses have now reached US$657,000. Andre Cronje, director of the Fantom Foundation, said that the funds stolen on Fantom belong to employees and not the foundation. The Fantom Foundation posted on the X platform that a small number of Fantom wallets had been stolen previously, including approximately US$550,000 in Fantom Foundation funds. The vast majority of Fantom Foundation funds (over 99%) have not been affected and remain safe. The Fantom Foundation said that although initial reports suggested that the attack was carried out through a zero-day vulnerability in Google Chrome, the specific attack mechanism is still under active investigation. Additionally, a Fantom employee’s personal wallet was affected. Some of the affected wallets were labeled Foundation wallets but have since been reassigned to a Fantom employee, and the incident is being treated as a targeted attack on an individual. Officials are currently tracking and investigating the employees lost funds. Slow Mist Chief Information Security Officer 23pds said that based on MistTrack’s analysis of on-chain transfer methods and Slow Mist’s past emergency experience, Fantom’s private key should have been stolen in this incident; it may be that the Fantom Foundation or employees were attacked by phishing or social engineering. Running malicious Trojan files resulted in the theft of some wallet private keys.