hack
939,899 مشاهدات
532 يقومون بالنقاش
رائج
جديد
Step Finance treasury hacked: $29 million in SOL leaves Solana front page wallets
📅 January 31
We are not talking about a small protocol, but one that aggregates positions from almost 95% of the network's projects, that organizes the Solana Crossroads conference in Istanbul and that even ventured into the tokenization of stocks like Nvidia and Tesla.
📖The incident was revealed by the Step Finance team itself through a statement on X, where they confirmed a security breach in some of their treasury and commission wallets. Hours before the announcement, onchain data already showed unusual movements: exactly 261,854 SOL were de-staked and transferred out of the addresses linked to the protocol.
The security firm CertiK estimated that the value of the funds moved is around $29 million. However, the team is yet to clarify the root cause of the incident. It is not known whether it was a vulnerability in smart contracts, a flaw in access controls or the direct compromise of private keys. It has also not been confirmed whether user funds, beyond the protocol's treasury, were affected.
Step Finance is not a minor player within the ecosystem. Founded in 2021, it functions as a visualization dashboard that aggregates LP tokens, yield farm positions, and multiple Solana protocols into a single dashboard. Additionally, it operates the SolanaFloor news outlet, manages a validator node, and allocates 100% of the validator's revenue—after operating costs—to repurchases of the STEP token to distribute to those staking xSTEP.
This event adds to a chain of incidents that have hit projects in the Solana ecosystem in the last year. In April 2025, Loopscale lost $5.8 million just two weeks after its launch. In August, CrediX suffered a theft of $4.5 million after controlling an administrative wallet. In November, South Korean exchange Upbit reported a $37 million hack involving assets on the Solana network.
Topic Opinion:
No matter how big or well-known a project is, security remains the Achilles heel of DeFi.
💬 Do you think these types of incidents continue to slow down institutional adoption in Solana?
Leave your comment...
#solana #defi #Hack #CryptoSecurity #CryptoNews $SOL
We are not talking about a small protocol, but one that aggregates positions from almost 95% of the network's projects, that organizes the Solana Crossroads conference in Istanbul and that even ventured into the tokenization of stocks like Nvidia and Tesla.
📖The incident was revealed by the Step Finance team itself through a statement on X, where they confirmed a security breach in some of their treasury and commission wallets. Hours before the announcement, onchain data already showed unusual movements: exactly 261,854 SOL were de-staked and transferred out of the addresses linked to the protocol.
The security firm CertiK estimated that the value of the funds moved is around $29 million. However, the team is yet to clarify the root cause of the incident. It is not known whether it was a vulnerability in smart contracts, a flaw in access controls or the direct compromise of private keys. It has also not been confirmed whether user funds, beyond the protocol's treasury, were affected.
Step Finance is not a minor player within the ecosystem. Founded in 2021, it functions as a visualization dashboard that aggregates LP tokens, yield farm positions, and multiple Solana protocols into a single dashboard. Additionally, it operates the SolanaFloor news outlet, manages a validator node, and allocates 100% of the validator's revenue—after operating costs—to repurchases of the STEP token to distribute to those staking xSTEP.
This event adds to a chain of incidents that have hit projects in the Solana ecosystem in the last year. In April 2025, Loopscale lost $5.8 million just two weeks after its launch. In August, CrediX suffered a theft of $4.5 million after controlling an administrative wallet. In November, South Korean exchange Upbit reported a $37 million hack involving assets on the Solana network.
Topic Opinion:
No matter how big or well-known a project is, security remains the Achilles heel of DeFi.
💬 Do you think these types of incidents continue to slow down institutional adoption in Solana?
Leave your comment...
#solana #defi #Hack #CryptoSecurity #CryptoNews $SOL
🚨 Massive shockwave on $SOL !
STEP Finance just got breached 261,854 $SOL unstaked and gone 😱
Liquidity shaken, market already reacting fast 📉
Every $SOL holder needs to stay alert this isn’t noise, it’s real.
DYOR. NFA.
#solana #CryptoAlertX #Hack 🚨
STEP Finance just got breached 261,854 $SOL unstaked and gone 😱
Liquidity shaken, market already reacting fast 📉
Every $SOL holder needs to stay alert this isn’t noise, it’s real.
DYOR. NFA.
#solana #CryptoAlertX #Hack 🚨
🚨MILLION DOLLAR MISTAKE:😭$ETH
A victim (0xd674) lost 4556 $ETH ($12.4M) due to a copy-paste address mistake.
Victim 0xd674 frequently transfers funds to Galaxy Digital via
0x6D90CC...dD2E48.
The attacker generated a poison address with the same first and last 4 characters as Galaxy Digital's deposit address and repeatedly sent dust transactions.
11 hours ago, the victim copied an address directly from transaction history to deposit into Galaxy Digital but copied the poison address instead.
As a result, 4,556 $ETH ($12.4M) was sent to the attacker.
💢A painful lesson!
Always double-check the address before making a transfer.
Don't copy addresses from your transaction history for convenience.
Victim address:
0xd6741220a947941bF290799811FcDCeA8AE4A7Da
#Mistake #crypto #Hack #HackerAlert #hackers
A victim (0xd674) lost 4556 $ETH ($12.4M) due to a copy-paste address mistake.
Victim 0xd674 frequently transfers funds to Galaxy Digital via
0x6D90CC...dD2E48.
The attacker generated a poison address with the same first and last 4 characters as Galaxy Digital's deposit address and repeatedly sent dust transactions.
11 hours ago, the victim copied an address directly from transaction history to deposit into Galaxy Digital but copied the poison address instead.
As a result, 4,556 $ETH ($12.4M) was sent to the attacker.
💢A painful lesson!
Always double-check the address before making a transfer.
Don't copy addresses from your transaction history for convenience.
Victim address:
0xd6741220a947941bF290799811FcDCeA8AE4A7Da
#Mistake #crypto #Hack #HackerAlert #hackers
CLAWDBOT HACKED. YOUR FUNDS ARE NOT SAFE.
Hundreds of API keys and private chat records leaked. Unauthenticated instances exposed. Credential theft and remote code execution are imminent. This is not a drill. Public users MUST implement a whitelist policy NOW. The risk is real. Act immediately to protect your assets.
Disclaimer: This is not financial advice.
#crypto #security #blockchain #hack 🚨
Hundreds of API keys and private chat records leaked. Unauthenticated instances exposed. Credential theft and remote code execution are imminent. This is not a drill. Public users MUST implement a whitelist policy NOW. The risk is real. Act immediately to protect your assets.
Disclaimer: This is not financial advice.
#crypto #security #blockchain #hack 🚨
GOVT HACKER EXPOSED: 40 MILLION VANISHES!
ZachXBT just dropped a bombshell. John Daghita, aka Lick, allegedly siphoned over 40 million USD from a US government-seized address. The largest single heist? A staggering 24.9 million USD. This exploit happened around 2024. His father's company, CMDSS Corporation, has a government IT contract managing seized crypto. The company's online presence has vanished today. Daghita's identity was revealed after a boasting match with another hacker. His wallet is linked to over 90 million USD in stolen funds, targeting victims beyond the US government. This is a massive security breach.
Disclaimer: Not financial advice.
#crypto #hack #blockchain #security 🚨
ZachXBT just dropped a bombshell. John Daghita, aka Lick, allegedly siphoned over 40 million USD from a US government-seized address. The largest single heist? A staggering 24.9 million USD. This exploit happened around 2024. His father's company, CMDSS Corporation, has a government IT contract managing seized crypto. The company's online presence has vanished today. Daghita's identity was revealed after a boasting match with another hacker. His wallet is linked to over 90 million USD in stolen funds, targeting victims beyond the US government. This is a massive security breach.
Disclaimer: Not financial advice.
#crypto #hack #blockchain #security 🚨
#southkoreaseizedbtcloss 🚨 UNBELIEVABLE FAIL IN CRYPTO SECURITY 🚨
Even governments aren’t safe anymore…🙏💥😫
🇰🇷 South Korea’s prosecutors just lost nearly $48 MILLION worth of seized Bitcoin 😱
Yes — that Bitcoin ($BTC
)was confiscated from criminals… and then vanished during a routine security check 😓
southkoreaseizedbtcloss
🔍 Here’s what went down:
👉 The Gwangju District Prosecutors’ Office was inspecting seized BTC when an official accidentally clicked a phishing/scam site while accessing credentials on a USB drive.
👉 Result? Around 70 billion KRW (~$47.7 - $48M) in Bitcoin was stolen — gone.
👉 Prosecutors confirmed the loss but won’t disclose the exact amount or coin count as the investigation continues.
💥 This isn’t just another crypto hack —
It’s a slap in the face to custody practices worldwide.
If LAW ENFORCEMENT can lose Bitcoin this way, what chance do ordinary hodlers have? 😬
📉 Meanwhile:
• Crypto phishing losses globally dropped >80% in 2025 (to ~$83.8M) — but smart scammers still win.
• Chainalysis reports total crypto fraud & scam losses hit ~$17B in 2025 — with AI-powered attacks up 4.5x.
🔥 Even government custody isn’t immune.
Secure your private keys. Use hardware wallets + multisig + offline cold storage.
Because if a prosecutor’s office can get phished… no one is safe. 💀
#Bitcoin BTC #hack #security #SouthKorea #cryptoloss blockchain
Even governments aren’t safe anymore…🙏💥😫
🇰🇷 South Korea’s prosecutors just lost nearly $48 MILLION worth of seized Bitcoin 😱
Yes — that Bitcoin ($BTC
)was confiscated from criminals… and then vanished during a routine security check 😓
southkoreaseizedbtcloss
🔍 Here’s what went down:
👉 The Gwangju District Prosecutors’ Office was inspecting seized BTC when an official accidentally clicked a phishing/scam site while accessing credentials on a USB drive.
👉 Result? Around 70 billion KRW (~$47.7 - $48M) in Bitcoin was stolen — gone.
👉 Prosecutors confirmed the loss but won’t disclose the exact amount or coin count as the investigation continues.
💥 This isn’t just another crypto hack —
It’s a slap in the face to custody practices worldwide.
If LAW ENFORCEMENT can lose Bitcoin this way, what chance do ordinary hodlers have? 😬
📉 Meanwhile:
• Crypto phishing losses globally dropped >80% in 2025 (to ~$83.8M) — but smart scammers still win.
• Chainalysis reports total crypto fraud & scam losses hit ~$17B in 2025 — with AI-powered attacks up 4.5x.
🔥 Even government custody isn’t immune.
Secure your private keys. Use hardware wallets + multisig + offline cold storage.
Because if a prosecutor’s office can get phished… no one is safe. 💀
#Bitcoin BTC #hack #security #SouthKorea #cryptoloss blockchain
SCROLL CO-FOUNDER HACKED $100M AT STAKE
Entry: 10000 🟩
Target 1: 12000 🎯
Target 2: 15000 🎯
Stop Loss: 9000 🛑
Kenneth Shen's X account is compromised. A hacker is impersonating officials. They're sending phishing scams via DM. This is not a drill. Protect your assets NOW. Ignore all suspicious messages. Verify everything directly. The risk is extreme. Act with extreme caution.
Disclaimer: This is not financial advice.
#crypto #scam #hack #security #alert 🚨
Entry: 10000 🟩
Target 1: 12000 🎯
Target 2: 15000 🎯
Stop Loss: 9000 🛑
Kenneth Shen's X account is compromised. A hacker is impersonating officials. They're sending phishing scams via DM. This is not a drill. Protect your assets NOW. Ignore all suspicious messages. Verify everything directly. The risk is extreme. Act with extreme caution.
Disclaimer: This is not financial advice.
#crypto #scam #hack #security #alert 🚨
#ScrollCoFounderXAccountHacked
Bigger Lesson for Web3 Founders
🔐 #ScrollCoFounderXAccountHacked
This incident is another wake-up call for Web3 founders and teams. As public-facing figures, their accounts carry massive influence and are prime targets for hackers. A single compromised post can lead to financial losses for followers and reputational damage for projects. Best practices like hardware-based 2FA, limited access permissions, and rapid response protocols are no longer optional. For users, the key takeaway is simple: never trust announcements blindly—even from well-known founders—without cross-checking official project channels
#Hack #HackerAlert #Hacked
Bigger Lesson for Web3 Founders
🔐 #ScrollCoFounderXAccountHacked
This incident is another wake-up call for Web3 founders and teams. As public-facing figures, their accounts carry massive influence and are prime targets for hackers. A single compromised post can lead to financial losses for followers and reputational damage for projects. Best practices like hardware-based 2FA, limited access permissions, and rapid response protocols are no longer optional. For users, the key takeaway is simple: never trust announcements blindly—even from well-known founders—without cross-checking official project channels
#Hack #HackerAlert #Hacked
#ScrollCoFounderXAccountHacked
Impact on Scroll & Market Sentiment
⚠️ #ScrollCoFounderXAccountHacked
Account hacks involving founders often trigger short-term fear and uncertainty in the market. While there is no indication of protocol-level issues with Scroll, misinformation from compromised accounts can influence sentiment and price action. Investors should clearly separate social media incidents from project fundamentals. Scroll’s technology, roadmap, and on-chain security remain the real factors to watch. This situation underlines why traders must rely on multiple official sources before reacting to breaking news, especially during volatile market conditions
#HackerAlert #Hack #Hacked
Impact on Scroll & Market Sentiment
⚠️ #ScrollCoFounderXAccountHacked
Account hacks involving founders often trigger short-term fear and uncertainty in the market. While there is no indication of protocol-level issues with Scroll, misinformation from compromised accounts can influence sentiment and price action. Investors should clearly separate social media incidents from project fundamentals. Scroll’s technology, roadmap, and on-chain security remain the real factors to watch. This situation underlines why traders must rely on multiple official sources before reacting to breaking news, especially during volatile market conditions
#HackerAlert #Hack #Hacked
$90 MILLION HACKER EXPOSED. GOVERNMENT FUNDS LINKED.
Entry: 0.65 🟩
Target 1: 0.72 🎯
Target 2: 0.80 🎯
Stop Loss: 0.60 🛑
This hacker thought he could flex. He was wrong. ZachXBT just pulled back the curtain on a $90 million wallet. Funds traced back to seized government assets. On-chain never lies. Dirty money is always exposed. Don't be the next one caught showing off. Blockchain is unforgiving.
Disclaimer: For informational purposes only. Not investment advice.
#crypto #blockchain #hack #ZachXBT 🚨
Entry: 0.65 🟩
Target 1: 0.72 🎯
Target 2: 0.80 🎯
Stop Loss: 0.60 🛑
This hacker thought he could flex. He was wrong. ZachXBT just pulled back the curtain on a $90 million wallet. Funds traced back to seized government assets. On-chain never lies. Dirty money is always exposed. Don't be the next one caught showing off. Blockchain is unforgiving.
Disclaimer: For informational purposes only. Not investment advice.
#crypto #blockchain #hack #ZachXBT 🚨
$ETH SHOCKER: $4.1M VANISHES IN DEFI EXPLOIT
Entry: 1299 ETH 🟩
Target 1: 4.1M USD 🎯
Stop Loss: 0 ETH 🛑
Makina Finance just got hammered. Hackers manipulated DUSD-USDC liquidity. They stole 1299 ETH, worth $4.1M. A MEV builder frontran the attack. This complicates recovery for the revenue management protocol. PeckShield detected the exploit at 03:40:35 UTC. The attacker split the stolen ETH into two wallets. They converted it to ETH. These wallets now hold the assets. The attacker used a $280M flash loan. They manipulated the MachineShareOracle. This oracle sets the price for Dialectic USD and Dialectic USDC. They artificially inflated the pool price. Then they traded $110M USDC. They drained 1299 ETH. Then repaid the flash loan. PeckShield confirmed a price manipulation vulnerability. The attacker added liquidity before the price hike. They withdrew liquidity with profit. A MEV builder address frontran the transaction. They seized about $4.14M. The stolen ETH is in two wallets. One holds $3.3M. The other holds $880K. Makina activated security mode. They advise DUSD Curve liquidity providers to withdraw funds. Only the DUSD Curve pool was affected. Other assets are safe. Security firms urge revoking smart contract permissions. Avoid Makina contracts. Flash loan exploits are still frequent. Bunni lost $8.4M. Shibarium lost $2.4M. DeFi hacks are contained. Total crypto theft reached $3.4B. Focus shifted from DeFi to CEXs and wallets.
Disclaimer: Past performance is not indicative of future results.
#ETH #DeFi #Hack #Crypto #Trading 🚀
Entry: 1299 ETH 🟩
Target 1: 4.1M USD 🎯
Stop Loss: 0 ETH 🛑
Makina Finance just got hammered. Hackers manipulated DUSD-USDC liquidity. They stole 1299 ETH, worth $4.1M. A MEV builder frontran the attack. This complicates recovery for the revenue management protocol. PeckShield detected the exploit at 03:40:35 UTC. The attacker split the stolen ETH into two wallets. They converted it to ETH. These wallets now hold the assets. The attacker used a $280M flash loan. They manipulated the MachineShareOracle. This oracle sets the price for Dialectic USD and Dialectic USDC. They artificially inflated the pool price. Then they traded $110M USDC. They drained 1299 ETH. Then repaid the flash loan. PeckShield confirmed a price manipulation vulnerability. The attacker added liquidity before the price hike. They withdrew liquidity with profit. A MEV builder address frontran the transaction. They seized about $4.14M. The stolen ETH is in two wallets. One holds $3.3M. The other holds $880K. Makina activated security mode. They advise DUSD Curve liquidity providers to withdraw funds. Only the DUSD Curve pool was affected. Other assets are safe. Security firms urge revoking smart contract permissions. Avoid Makina contracts. Flash loan exploits are still frequent. Bunni lost $8.4M. Shibarium lost $2.4M. DeFi hacks are contained. Total crypto theft reached $3.4B. Focus shifted from DeFi to CEXs and wallets.
Disclaimer: Past performance is not indicative of future results.
#ETH #DeFi #Hack #Crypto #Trading 🚀
SAGA HACKED: 7 MILLION DRAINED!
SagaEVM network emergency shutdown at block 6,593,800. Critical smart contract vulnerability exploited. Hacker stole approximately 7 million USD in bridged assets like $USDC, $ETH, and tBTC. Funds moved to Ethereum Mainnet for dumping.
Team confirms SagaEVM is isolated. Mainnet and validators remain secure. No private key leaks or consensus issues. Developers working with exchanges to freeze hacker wallets and trace funds. Network remains frozen until the vulnerability is patched.
Disclaimer: This post is for informational purposes only and does not constitute investment advice.
#Saga #CryptoNews #Hack 🚨
SagaEVM network emergency shutdown at block 6,593,800. Critical smart contract vulnerability exploited. Hacker stole approximately 7 million USD in bridged assets like $USDC, $ETH, and tBTC. Funds moved to Ethereum Mainnet for dumping.
Team confirms SagaEVM is isolated. Mainnet and validators remain secure. No private key leaks or consensus issues. Developers working with exchanges to freeze hacker wallets and trace funds. Network remains frozen until the vulnerability is patched.
Disclaimer: This post is for informational purposes only and does not constitute investment advice.
#Saga #CryptoNews #Hack 🚨
🤔
Opinión NDV: Por qué una inversión de 10.300 millones en Upbit es "recoger dinero"
Autor: Lin Wanwan Dongcha Beating
NDV sostiene que Upbit sigue estando significativamente infravalorada a pesar de un reciente hackeo, citando una fuerte rentabilidad y dominio del mercado. Una fusión prevista entre la matriz Dunamu y Naver Financial podría respaldar una OPV estadounidense en 2026, cerrando potencialmente la brecha de valoración con sus pares globales y posicionando al grupo como una plataforma de pagos-intercambio-stablecoin. #hack link
Opinión NDV: Por qué una inversión de 10.300 millones en Upbit es "recoger dinero"
Autor: Lin Wanwan Dongcha Beating
NDV sostiene que Upbit sigue estando significativamente infravalorada a pesar de un reciente hackeo, citando una fuerte rentabilidad y dominio del mercado. Una fusión prevista entre la matriz Dunamu y Naver Financial podría respaldar una OPV estadounidense en 2026, cerrando potencialmente la brecha de valoración con sus pares globales y posicionando al grupo como una plataforma de pagos-intercambio-stablecoin. #hack link
ETH EXPLOSION: $4.1M DRAINED FROM MAKI
Entry: 3300 🟩
Target 1: 3200 🎯
Stop Loss: 3400 🛑
MAKI FINANCE just got HAMMERED. Hackers manipulated oracles, draining $4.1 MILLION in ETH. A MEV builder front-ran the attack, snatching most of the loot. This is a DISASTER for the new yield protocol. Funds are split across two wallets, converted to ETH. Security firms are SCREAMING for users to revoke permissions and avoid MAKI contracts. This exploit only hit the DUSD Curve pool. Other assets are SAFE. Flash loan exploits are NOT over. Do NOT get caught sleeping.
Disclaimer: This is not financial advice.
#DeFi #Crypto #Hack #Ethereum #MAKI 💥
Entry: 3300 🟩
Target 1: 3200 🎯
Stop Loss: 3400 🛑
MAKI FINANCE just got HAMMERED. Hackers manipulated oracles, draining $4.1 MILLION in ETH. A MEV builder front-ran the attack, snatching most of the loot. This is a DISASTER for the new yield protocol. Funds are split across two wallets, converted to ETH. Security firms are SCREAMING for users to revoke permissions and avoid MAKI contracts. This exploit only hit the DUSD Curve pool. Other assets are SAFE. Flash loan exploits are NOT over. Do NOT get caught sleeping.
Disclaimer: This is not financial advice.
#DeFi #Crypto #Hack #Ethereum #MAKI 💥
🔽 Nearly 80% of crypto projects never fully recover after a major hack
#MarketRebound
#Hack
#doyouknowwhy
@just 📄
#MarketRebound
#Hack
#doyouknowwhy
@just 📄
DEFI MELTDOWN: $4.2M VANISHES!
Entry: 1.00 🟩
Target 1: 0.95 🎯
Stop Loss: 1.05 🛑
Makina Finance is bleeding. Hackers exploited an oracle flaw. $4.2 million is gone. CertiK tracked funds to an MEV builder. A flash loan amplified the damage. The DUSD/USDC pool was drained. No safeguards existed. This exploit highlights dangerous oracle designs. DeFi is on high alert.
Disclaimer: This is not financial advice.
#DeFi #Crypto #Hack #Exploit 💥
Entry: 1.00 🟩
Target 1: 0.95 🎯
Stop Loss: 1.05 🛑
Makina Finance is bleeding. Hackers exploited an oracle flaw. $4.2 million is gone. CertiK tracked funds to an MEV builder. A flash loan amplified the damage. The DUSD/USDC pool was drained. No safeguards existed. This exploit highlights dangerous oracle designs. DeFi is on high alert.
Disclaimer: This is not financial advice.
#DeFi #Crypto #Hack #Exploit 💥
MAKINA WIPED OUT. HUGE LOSS.
5,107,871 USDC GONE.
The multi-chain DeFi execution engine Makina was just hit hard on Ethereum. Attackers exploited a vulnerability. They manipulated pool prices. They inflated LP assets. Arbitrage attack executed. This is a massive blow. Don't get caught in the crossfire. Stay sharp.
Disclaimer: This is not financial advice.
#DeFi #Hack #CryptoNews 🚨
5,107,871 USDC GONE.
The multi-chain DeFi execution engine Makina was just hit hard on Ethereum. Attackers exploited a vulnerability. They manipulated pool prices. They inflated LP assets. Arbitrage attack executed. This is a massive blow. Don't get caught in the crossfire. Stay sharp.
Disclaimer: This is not financial advice.
#DeFi #Hack #CryptoNews 🚨
سجّل الدخول لاستكشاف المزيد من المُحتوى