<\/p>\n
Solana-based decentralized futures exchange<\/a> Cypher Protocol has managed to freeze $600,000 worth of crypto stolen from an Aug. 7 security exploit.<\/p>\n In an X (Twitter) post on Aug. 18, Cypher Protocol reported that more than half of the funds stolen have been successfully frozen across centralized exchanges with the help of several independent blockchain investigators.<\/p>\n \u201cThe return of these funds will be predicated on the cooperation of these CEXs and seizure warrants being issued by law enforcement,\u201d it said.<\/p>\n update from cypher<\/p>\n ~$600k has been frozen across CEXs, the return of these funds will be predicated on the cooperation of these CEXs and seizure warrants being issued by law enforcement<\/p>\n \u2014 cypher \u00a9\ufe0f (@cypher_protocol) August 17, 2023<\/a><\/p><\/blockquote>\n Cypher was exploited<\/a> on Aug. 7 for around $1 million resulting in the protocol halting its smart contracts. <\/p>\n The DeFi exchange enables lending and borrowing through primary accounts with multiple cross-collateralized sub-accounts. However, the vulnerabilities prevented proper tracking of isolated sub-accounts and insufficient margin checks before borrowing, explained blockchain security firm Halborn<\/a>. <\/p>\n The attacker exploited these code vulnerabilities using multiple accounts to drain an estimated $1 million in various crypto assets including USDT, USDT, SOL, wETH, and a handful of other altcoins. <\/p>\n On Aug. 10, the team managed to make contact with the hacker after it had\u00a0offered<\/a> a 10% white hat bounty worth around $120,000. <\/p>\n Two days later, the protocol said the hacker had missed the deadline to return the funds and opened the bounty up to the public. They also hinted at knowing the partial identity of the exploiter.<\/p>\n The reward bounty is now open to the public pic.twitter.com\/fEIiQ8rTKN<\/a><\/p>\n \u2014 cypher \u00a9\ufe0f (@cypher_protocol) August 12, 2023<\/a><\/p><\/blockquote>\n On Aug. 16, Cypher announced<\/a> a redemption plan and \u201csocialized losses policy\u201d to distribute remaining assets to affected users. A redemption package with protocol assets will be distributed pro rata based on user share, it stated. <\/p>\n \u201cThe value used for redemption in relation to a margin account will be based on a snapshot of the account\u2019s assets at the time Cypher protocol was frozen,\u201d totaling around 31 cents on the dollar it added. <\/p>\n In its latest statement, Cypher thanked blockchain sleuth ZachXBT, adding \u201che was invaluable to the Cypher team and the main contributor in the initial freezing of funds across multiple CEXs, and also aided in tracking the attacker.\u201d<\/p>\n Cointelegraph reached out to ZachXBT for comment but had not heard back at the time of writing. <\/p>\n Related: <\/em><\/strong>Crypto hacks and exploits snatch over $300M in Q2 2023<\/em><\/strong><\/a><\/p>\n According to the De.Fi Rekt database<\/a>, the Cypher exploit was not the largest so far in August, coming in third. <\/p>\n DeFi protocol Zunami suffered<\/a> a $2.1 million flash loan attack on Aug. 13 and leveraged yield aggregation platform Steadefi was exploited for $1.1 million on Aug. 7. <\/p>\n\n
\n