Hackers Steal $25 Million Worth of Cryptocurrency From Uniswap and LendfMe

Hackers have stolen more than $25 million in cryptocurrency from the Uniswap exchange and the Lendf.me lending platform. From a report: The attacks took place over the weekend, on Saturday and Sunday, respectively. Although an investigation is currently underway, the two attacks are believed to be related, and most likely carried out by the same group or individual. According to investigators, hackers appear to have chained together bugs and legitimate features from different blockchain technologies to orchestrate a sophisticated "reentrancy attack." Reentrancy attacks allow hackers to withdraw funds repeatedly, in a loop, before the original transaction is approved or declined.

What's that f stand for?

[Fly Swatter]

Lendf.me. Yup, they got it from behind.

Re:

[DrSkwid]

When the Fed releases its coin (which many think is imminent), it will be traceable, have an expiry date and only allowed to be spent on approved classes of goods.

That will be the face of UBI and once again - careful what you wish for.

And this isn't some crackpot tinfoil hat talk

https://www.youtube.com/watch?... [youtube.com]

Re:

[kaizendojo]

(which many think is imminent)

Couldn't help but read this in Trump's voice.

Re:

[kenh]

You just described EBT cards, except for the expiry part...

This is expected

[DaveV1.0]

It is literally better than robbing banks. One can steal millions of dollars in a mostly untraceable form across multiple jurisdictions using a hijacked network connection. One doesn't need to worry about physical evidence, security guards, police patrols, moving the mass of physical currency, and laundering it can be done much more easily by selling of digital, e.i. non-physical, works to anonymous users, something that is impossible to prove isn't legitimate. Once can even use a cam site to do it, with fake fans providing money to fake models.

Update: Funds Returned

[JanRaas]

An update on Apr-21, via ZDNet [zdnet.com]:

The hackers have now returned all the stolen funds after they accidentally leaked an IP address during the attack. The funds were returned after Lendf.me and the dForce Foundation negotiated with the hackers using blockchain transactions.

According to Larry Cermak (dir. of research at The Block):

Now the attacker has returned virtually all funds. He took away $25 million and returned $23.8 million. The disparity is likely only because price went down slightly in the last two d