Cyvers in the News

Holograph hack leads to $7M loss, HLG token dives 80%

^{Blockchain security firm Cyvers tracked part of the stolen funds, revealing the hacker's strategy} involving USDT, ETH, and privacy protocols.

‍

Blockchain security platform ^{Cyvers reported that some of the stolen tokens were swapped for the USDT stablecoin}, which the attacker used to acquire 300 ETH. Subsequently, the hacker distributed the funds to several addresses, including those linked to privacy protocols like Tornado Cash and Railgun.

Sifu’s Uwu Lend hacked again by same attacker, loses $3.7M

Uwu Lend was hacked again on Thursday for $3.7 million, ^{according to the blockchain security firm Cyvers.}

‍

^{Cyvers revealed that the attacker hit them again 24 hours later.} The protocol came out of leading lending protocol Aave, particularly its so-called v2 codebase, allowing users to borrow, lend and stake a variety of crypto assets.

UwU Lend hit by $20M crypto hack

The ongoing exploit has already netted the attacker nearly $20 million in digital assets.

^{The $14 million exploit was first discovered by on-chain security firm Cyvers,} which wrote in a June 10 X post:

“Hey @UwU_Lend , you are being attacked! So far address got around $14M…”

‍

While the team is still investigating the incident, it is shaping up as a major cryptocurrency hack that affected multiple assets, according to ^{Meir Dolev, chief technology officer and co-founder of Cyvers.}

‍

Dolev told Cointelegraph:

“The attack is still ongoing, but we can already see that we’re talking about a major incident that has already passed the $20 million threshold. We’re talking about different assets (like WBTC and DAI) that are drained from the pools and being converted to ETH.”

‍

Shortly after the attack, Cyvers revealed that the attack was funded by the crypto mixing protocol Tornado Cash and executed three malicious transactions. According to Dolev:

“The UwU lending contract was exploited by an attacker that executed three transactions in six minutes and drained approximately $20 million. The attacker was funded from Tornado Cash two days ago.”