• bitcoinBitcoin (BTC) $ 87,384.00
  • ethereumEthereum (ETH) $ 3,160.49
  • tetherTether (USDT) $ 1.00
  • solanaSolana (SOL) $ 204.92
  • bnbBNB (BNB) $ 607.77
  • dogecoinDogecoin (DOGE) $ 0.377416
  • xrpXRP (XRP) $ 0.659927
  • usd-coinUSDC (USDC) $ 0.999540
  • staked-etherLido Staked Ether (STETH) $ 3,159.39
  • cardanoCardano (ADA) $ 0.533058
  • tronTRON (TRX) $ 0.177541
  • shiba-inuShiba Inu (SHIB) $ 0.000024
  • wrapped-stethWrapped stETH (WSTETH) $ 3,731.34
  • the-open-networkToncoin (TON) $ 5.25
  • avalanche-2Avalanche (AVAX) $ 31.99
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 86,978.00
  • wethWETH (WETH) $ 3,161.43
  • suiSui (SUI) $ 2.98
  • chainlinkChainlink (LINK) $ 13.38
  • bitcoin-cashBitcoin Cash (BCH) $ 413.44
  • polkadotPolkadot (DOT) $ 5.08
  • leo-tokenLEO Token (LEO) $ 7.27
  • aptosAptos (APT) $ 11.84
  • nearNEAR Protocol (NEAR) $ 5.15
  • wrapped-eethWrapped eETH (WEETH) $ 3,322.51
  • litecoinLitecoin (LTC) $ 73.41
  • pepePepe (PEPE) $ 0.000013
  • usdsUSDS (USDS) $ 0.999032
  • uniswapUniswap (UNI) $ 8.47
  • crypto-com-chainCronos (CRO) $ 0.159925
  • bittensorBittensor (TAO) $ 537.56
  • internet-computerInternet Computer (ICP) $ 8.25
  • stellarStellar (XLM) $ 0.126040
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 1.30
  • kaspaKaspa (KAS) $ 0.133241
  • ethereum-classicEthereum Classic (ETC) $ 21.78
  • daiDai (DAI) $ 0.999690
  • whitebitWhiteBIT Coin (WBT) $ 21.75
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • dogwifcoindogwifhat (WIF) $ 2.98
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.370433
  • blockstackStacks (STX) $ 1.90
  • moneroMonero (XMR) $ 147.67
  • render-tokenRender (RENDER) $ 6.70
  • okbOKB (OKB) $ 43.27
  • aaveAave (AAVE) $ 172.17
  • filecoinFilecoin (FIL) $ 3.95
  • mantleMantle (MNT) $ 0.697290
  • arbitrumArbitrum (ARB) $ 0.584522
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.998283
  • bonkBonk (BONK) $ 0.000033
  • injective-protocolInjective (INJ) $ 23.15
  • hedera-hashgraphHedera (HBAR) $ 0.058370
  • celestiaCelestia (TIA) $ 5.09
  • immutable-xImmutable (IMX) $ 1.24
  • vechainVeChain (VET) $ 0.025294
  • fantomFantom (FTM) $ 0.707830
  • bitget-tokenBitget Token (BGB) $ 1.41
  • optimismOptimism (OP) $ 1.54
  • cosmosCosmos Hub (ATOM) $ 4.93
  • binance-peg-wethBinance-Peg WETH (WETH) $ 3,165.25
  • thorchainTHORChain (RUNE) $ 5.62
  • flokiFLOKI (FLOKI) $ 0.000193
  • sei-networkSei (SEI) $ 0.441146
  • the-graphThe Graph (GRT) $ 0.176763
  • rocket-pool-ethRocket Pool ETH (RETH) $ 3,515.49
  • ethenaEthena (ENA) $ 0.552355
  • mantle-staked-etherMantle Staked Ether (METH) $ 3,311.57
  • jupiter-exchange-solanaJupiter (JUP) $ 1.09
  • pyth-networkPyth Network (PYTH) $ 0.391637
  • worldcoin-wldWorldcoin (WLD) $ 2.22
  • popcatPopcat (POPCAT) $ 1.44
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 3,235.43
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 87,091.00
  • theta-tokenTheta Network (THETA) $ 1.35
  • makerMaker (MKR) $ 1,490.13
  • kucoin-sharesKuCoin (KCS) $ 10.84
  • mantra-daoMANTRA (OM) $ 1.44
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 87,368.00
  • gatechain-tokenGate (GT) $ 9.30
  • algorandAlgorand (ALGO) $ 0.143816
  • ondo-financeOndo (ONDO) $ 0.821235
  • arweaveArweave (AR) $ 17.34
  • raydiumRaydium (RAY) $ 4.28
  • msolMarinade Staked SOL (MSOL) $ 252.04
  • bitcoin-svBitcoin SV (BSV) $ 55.18
  • based-brettBrett (BRETT) $ 0.109732
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 3,153.32
  • beam-2Beam (BEAM) $ 0.020280
  • fasttokenFasttoken (FTN) $ 3.04
  • galaGALA (GALA) $ 0.025333
  • neiro-3Neiro (NEIRO) $ 0.002378
  • lido-daoLido DAO (LDO) $ 1.11
  • heliumHelium (HNT) $ 5.77
  • bittorrentBitTorrent (BTT) $ 0.000001
  • starknetStarknet (STRK) $ 0.462356
  • tokenize-xchangeTokenize Xchange (TKX) $ 12.02
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 86,739.00
  • jasmycoinJasmyCoin (JASMY) $ 0.019341
  • matic-networkPolygon (MATIC) $ 0.371364
  • peanut-the-squirrelPeanut the Squirrel (PNUT) $ 0.911379
  • aerodrome-financeAerodrome Finance (AERO) $ 1.34
  • flowFlow (FLOW) $ 0.572270
  • quant-networkQuant (QNT) $ 60.03
  • coredaoorgCore (CORE) $ 0.944152
  • solv-protocol-solvbtc-bbnSolv Protocol SolvBTC.BBN (SOLVBTC.BB) $ 87,057.00
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 86,982.00
  • pendlePendle (PENDLE) $ 5.21
  • goatseus-maximusGoatseus Maximus (GOAT) $ 0.840111
  • eosEOS (EOS) $ 0.545322
  • cat-in-a-dogs-worldcat in a dogs world (MEW) $ 0.009277
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 215.41
  • dydx-chaindYdX (DYDX) $ 1.16
  • elrond-erd-2MultiversX (EGLD) $ 29.35
  • ordinalsORDI (ORDI) $ 38.51
  • axie-infinityAxie Infinity (AXS) $ 5.12
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.376528
  • neoNEO (NEO) $ 10.86
  • ecasheCash (XEC) $ 0.000038
  • flare-networksFlare (FLR) $ 0.014443
  • apecoinApeCoin (APE) $ 1.05
  • akash-networkAkash Network (AKT) $ 3.05
  • aioz-networkAIOZ Network (AIOZ) $ 0.667131
  • usddUSDD (USDD) $ 0.999063
  • nexoNEXO (NEXO) $ 1.15
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 3,246.48
  • notcoinNotcoin (NOT) $ 0.007074
  • mina-protocolMina Protocol (MINA) $ 0.609677
  • tezosTezos (XTZ) $ 0.703807
  • kaiaKaia (KAIA) $ 0.120250
  • grassGrass (GRASS) $ 2.82
  • conflux-tokenConflux (CFX) $ 0.146130
  • the-sandboxThe Sandbox (SAND) $ 0.281586
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 3,160.70
  • mog-coinMog Coin (MOG) $ 0.000002
  • gnosisGnosis (GNO) $ 250.40
  • fraxFrax (FRAX) $ 0.996227
  • tether-goldTether Gold (XAUT) $ 2,606.34
  • wormholeWormhole (W) $ 0.232742
  • decentralandDecentraland (MANA) $ 0.338043
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 3,423.50
  • book-of-memeBOOK OF MEME (BOME) $ 0.008987
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 3,160.37
  • arkhamArkham (ARKM) $ 2.07
  • superfarmSuperVerse (SUPER) $ 1.33
  • zcashZcash (ZEC) $ 39.45
  • axelarAxelar (AXL) $ 0.701947
  • chilizChiliz (CHZ) $ 0.063322
  • spx6900SPX6900 (SPX) $ 0.615305
  • act-i-the-ai-prophecyAct I The AI Prophecy (ACT) $ 0.608779
  • nervos-networkNervos Network (CKB) $ 0.012743
  • ethereum-name-serviceEthereum Name Service (ENS) $ 16.97
  • turboTurbo (TURBO) $ 0.008138
  • fwogFwog (FWOG) $ 0.577963
  • pepecoin-2PepeCoin (PEPECOIN) $ 4.60
  • beldexBeldex (BDX) $ 0.081416
  • zksyncZKsync (ZK) $ 0.147261
  • safeSafe (SAFE) $ 1.08
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000098
  • binance-staked-solBinance Staked SOL (BNSOL) $ 207.55
  • dydxdYdX (ETHDYDX) $ 1.16
  • roninRonin (RON) $ 1.45
  • pancakeswap-tokenPancakeSwap (CAKE) $ 1.84
  • super-oethSuper OETH (SUPEROETHB) $ 3,159.83
  • oasis-networkOasis (ROSE) $ 0.075970
  • pax-goldPAX Gold (PAXG) $ 2,577.36
  • paypal-usdPayPal USD (PYUSD) $ 0.999615
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 0.999334
  • corgiaiCorgiAI (CORGIAI) $ 0.001472
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000024
  • true-usdTrueUSD (TUSD) $ 1.00
  • frax-etherFrax Ether (FRXETH) $ 3,146.48
  • bitcoin-avalanche-bridged-btc-bAvalanche Bridged BTC (Avalanche) (BTC.B) $ 87,339.00
  • dexeDeXe (DEXE) $ 8.64
  • havvenSynthetix Network (SNX) $ 1.50
  • iotaIOTA (IOTA) $ 0.138033
  • eigenlayerEigenlayer (EIGEN) $ 2.55
  • blurBlur (BLUR) $ 0.237498
  • gigachad-2Gigachad (GIGA) $ 0.049188
  • apenftAPENFT (NFT) $ 0.00000047
  • xdce-crowd-saleXDC Network (XDC) $ 0.030617
  • bitcoin-goldBitcoin Gold (BTG) $ 26.11
  • polygon-pos-bridged-weth-polygon-posPolygon PoS Bridged WETH (Polygon POS) (WETH) $ 3,158.85
  • l2-standard-bridged-weth-blastL2 Standard Bridged WETH (Blast) (WETH) $ 3,160.79
  • echelon-primeEchelon Prime (PRIME) $ 8.99
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.06
  • woo-networkWOO (WOO) $ 0.237492
  • tbtctBTC (TBTC) $ 86,977.00
  • astarAstar (ASTR) $ 0.058157
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 86,505.00
  • kavaKava (KAVA) $ 0.392789
  • stepnGMT (GMT) $ 0.141040
  • quantixaiQuantixAI (QAI) $ 101.15
  • bazaarsBazaars (BZR) $ 6.87
  • compound-governance-tokenCompound (COMP) $ 47.46
  • trust-wallet-tokenTrust Wallet (TWT) $ 0.995734
  • swethSwell Ethereum (SWETH) $ 3,381.83
  • usdbUSDB (USDB) $ 0.993469
  • hashnote-usycHashnote USYC (USYC) $ 1.06
  • theta-fuelTheta Fuel (TFUEL) $ 0.058673

Malicious smart contract causes $2.8M in SUN token losses on Arbitrum

0 7

Malicious smart contract causes $2.8M in SUN token losses on Arbitrum

  cryptopolitan.com 2 h

Malicious smart contract causes $2.8M in SUN token losses on Arbitrum

A malicious smart contract on the Arbitrum chain caused an estimated loss of $2.7M. Initial analysis showed SUN tokens were minted outside their usual schedule.

An attacker deployed a malicious smart contract to the Arbitrum chain, affecting Sun (SUN) tokens. The attack created more SUN out of thin air, leading to potential losses of $2.8M. The attack happened after the mgmt smart contract was upgraded in a single transaction, and then the funds were swapped in the next blocks. The attacker used the Across bridge to fund the initial wallet from Ethereum.

The tokens were immediately swapped, allowing the attacker to lock in the gains immediately. The minting attacker minted a total of 200T SUN each, then swapped them for USDT almost immediately. The transactions were visible through the SUN token page and happened hours before being noticed.

Malicious smart contract causes $2.8M in SUN token losses on Arbitrum

SUN tokens were minted and swapped in two transactions, crashing the asset to zero. | Source: Nansen

One of the swap transactions was for more than 2.1M USDT, while the rest of the SUN tokens were swapped for WETH, causing another $750K loss.

The Arbitrum network itself is not affected. The recent exploit comes just days after another vulnerable smart contract was drained of $93K of tokens via a faulty function.

ALERT! Our system has detected attack transactions targeting @RamsesExchange’s contract on #Arbitrum, resulting in a loss of ~$93K. We have contacted the team, and they have informed us that actions have already been taken.

The root cause appears to be an unverified input in… pic.twitter.com/I4KsHblIrC

— BlockSec Phalcon (@Phalcon_xyz) October 24, 2024

Arbitrum users were also affected by the recent Radiant Capital hack, which led to $50M in losses. Users of Radiant Capital are still affected if they have active wallet approvals for the protocol.

SUN crashes due to its main exchange getting drained

The SUN token is relatively inactive and the smart contract points to no known DEX. SUN appeared first around September 17, with a limited supply of liquidity. The token grew gradually after its launch, from $7 to $10 in the weeks before the attack. The main goal of the token was to serve as a store of value and collateral for decentralized finance.

Malicious smart contract causes $2.8M in SUN token losses on Arbitrum

SUN tokens crashed to zero after the exploit of a smart contract on Arbitrum. | Source: DEXScreener

The token hack led to the loss of all notional value. In fact, the exploit transaction made up almost all of the volume for SUN so far, reaching $2.2M in total.

More than 94% of all SUN was held in a single wallet, suggesting the project was still not operating in full. The wallet is tagged as the SunRay LP or liquidity provider on the Sunray DEX

More than 19.9K addresses held SUN tokens before the exploit, though most were still controlled by a single entity. None of the addresses were directly affected, as the exploiter sold a newly minted supply.

An X account linked to the Sunray DEX revealed the suspicious activity originating from its treasury. The Sunray DEX stated SUN and ARCTokens flowed out of its treasury and the team is attempting a retrieval. However, this may be impossible as the tokens were already swapped for USDT, which could be moved or traded again.

🌇Hello, sunray global users,

🌈Regarding the transfer of SUN and ARCToken treasury assets at noon today, we are currently working hard to restore it. Don’t worry, all user assets are available on the chain. I believe that SUNRAY will become more and more popular in the future pic.twitter.com/wmQo9W1q0L

— SUNRAY·FINANCE (@SUNRAY_DEX) October 30, 2024

Sunray DEX is a new attempt at building a blockchain-based market on Arbitrum. The DEX was created with the involvement of SoftBank, though the project is not listed on its portfolio page. The Sunray DEX X account also communicated in a way that singled it out as a crypto outsider, taking a long time to launch in a dynamic environment where new tokens and DEX build up their activity much faster.

The Sunray DEX has a landing page, but most of its features are still inactive. The Sunray Finance protocol promised an extremely high passive income of 299% for SUN, with the addition of the ARC governance token.

Neither Sunray Finance nor Sunray Swap have reported a hack through their channels. The investigation is ongoing, as the native SUN token is now practically worthless. Sunray Finance claimed its smart contracts were audited, but the project’s social media suggest it was not prepared enough for the latest DEX and Web3 challenges and attacks.

The recent exploit was relatively small compared to other DEX hacks. However, it may point to another loss on the side of SoftBank, if it is indeed the main backer of Sunray Finance. The DEX itself has no landing page of its own and only points to SoftBank. The Japanese investment fund has backed multiple crypto projects, some of which were successful, but others, like FTX, suffered deep losses.

Source

Leave A Reply

Your email address will not be published.