BadgerDAO Contacts Hacker Seeking Settlement; BitMart Exchange Loses $200M

BadgerDAO seeks redress, but BitMart attack shows centralized exchanges are not immune from large scale thefts either.

article-image

BadgerDAO; Source: Blockworks

share

key takeaways

  • BadgerDAO smart contracts remain paused following website exploit that cost users $120 million, as community pursues investigation and reaches out to the thief in hopes of striking a deal
  • BitMart Exchange suffered an even larger loss after two hot wallet private keys were compromised

A bitcoin-focused DeFi protocol, BadgerDAO, had its web server compromised for roughly two weeks, allowing an unknown attacker to surreptitiously steal millions of dollars worth of digital assets from users of the platform, Blockworks reported.

On Sunday, representatives of the DAO attempted to contact the party responsible for the theft using a message published in a transaction on the Ethereum network and on Twitter:

Loading Tweet..

According to a website set up to provide updates on the case, the group has enlisted blockchain forensic analysis platform Chainalysis and cybersecity firm Mandiant, to help with the investigation. The latest update said that BadgerDAO’s DeFi services remain temporarily shut down:

“Smart Contracts have not yet been reactivated and therefore users remain unable to deposit, claim rewards, or withdraw from either the Badger app (app.badger.com) or at the smart contract level. Badger is working to ensure that the smart contracts can be safely reactivated without further risk to funds.”

The system has a “Guardian” role, that has permission to pause the DeFi strategies employed by the protocol, which is “intended to be a trusted party that can act fast in emergency situations,” according to the Badger.com documentation. The Guardian is controlled by a developer multi-signature wallet, whose five members are elected by the DAO’s BADGER token holders. Any single member of the multisig can pause the smart contracts, but it requires three out of the five signers to reactivate them.

Security company PeckShield reports the total loss to BadgerDAO’s users at $120.3 million, based primarily on the theft of 2,100 BTC and 151 ETH. The largest affected user of the protocol has been linked to cryptocurrency lending platform Celsius.

BitMart Exchange loses $200 million in breach

Sheldon Xia, founder and CEO of the centralized exchange BitMart.com, revealed on Sunday that two of the exchange’s hot wallets were compromised in a security breach that saw upwards of $150 million in assets disappear on the Ethereum and Binance Smart Chain networks.

Loading Tweet..

Xia said that an exchange private key was used to withdraw the funds, and pledged via Twitter, to make users whole.

“BitMart will use our own funding to cover the incident and compensate affected users. We are also talking to multiple project teams to confirm the most reasonable solutions such as token swaps. No user assets will be harmed.”

PeckShield, which initially pointed out a pattern of suspicious transactions early Sunday morning, has estimated the loss, comprised of a variety of small cap tokens, as totaling $200 million.


Get the day’s top crypto news and insights delivered to your inbox every evening. Subscribe to Blockworks’ free newsletter now.


Tags

Upcoming Events

HYATT REGENCY SALT LAKE CITY

TUES, OCT. 8, 2024

Guided by the expertise of Blockworks Research Analysts team, this one day event will feature senior leaders, entrepreneurs, and developers from across the crypto industry. Attendees will have the opportunity to participate in an immersive experience to explore the latest trends, […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

hivemapper.jpeg

Research

We believe crypto market participants overlook Hivemapper’s fundamental potential due to a poor understanding of both the niche map data market and Hivemapper’s positioning relative to incumbents. Hivemapper’s token model catalyzes both a cost and product advantage via unmatched map freshness and near real-time accuracy, which is its wedge into a market characterized by stale data and high data collection costs. Its current and potential future product suite may represent one of the strongest possibilities for PMF in crypto today.

article-image

👨‍⚖️ SBF’s courtroom sequel: Plus, Coinbase’s legal loss was DeFi’s gain

article-image

Public mining companies have been acquiring sites, refreshing machine fleets and diversifying business models in preparation for the event

article-image

Exploit shows centralization can sometimes be an asset

article-image

The Fidelity Ethereum Fund, like other proposed ETH ETFs, seeks to stake a portion of its assets, according to the firm’s Wednesday registration statement

article-image

The DAO first voted on enabling SAFE transfers over a year ago