
Bedrock DeFi, a decentralized finance protocol, has suffered a significant security breach resulting in the loss of approximately $2 million. The exploit, which occurred on September 26, 2024, involved the minting function of Bedrock's uniBTC token. The attacker was able to swap 30.8 ETH for uniBTC at a 1:1 exchange rate due to a vulnerability in the smart contract. The funds were funneled through TornadoCash, and 650 ETH, worth around $1.7 million, is currently held in the attacker's address. In a surprising move, Bedrock has offered the hacker a job to help strengthen their security measures. Additionally, Bedrock reassured users that the underlying wrapped BTC and BTC in reserves are safe.


















#CertiKInsight 🚨 Recently, EOA 0xaa1582084c4f588ef9be86f5ea1a919f86a3ee57 was drained of 12,083 spWETH (~$32M). 10k spWETH (~$26M) were sent to address 0x471c, then transferred to 4 wallets: - 0x105c = 1.75K ETH - 0x278d = 2.613K ETH - 0x408d = 3.73K ETH - 0xfaf2 = 1.865K ETH https://t.co/vPX6frV2Gy
Someone lost 12,083.6 $spWETH(worth $32.33M)! due to a phishing attack! According to Arkham, the wallet may be related to DiscusFish(@bitfish1). To avoid being phished, please do not click on any unknown links and do not sign any unknown signatures. Always double-check when… https://t.co/LSLMDeNQzb
🚨 43 mins ago, someone lost 12,083 spWETH ($32.43M) after signing a "permit" phishing signature.💸 https://t.co/y7PQZW2FZq