<\/p>\n
On Nov. 30, blockchain security firm PeckShield reported that Florence Finance had been attacked.<\/p>\n
The protocol has reportedly lost $1.45 million in USDC<\/a> in an attack called \u201caddress poisoning.\u201d At the time of writing, there were very few details about the hack and nothing on the Florence Finance X (Twitter) feed or Telegram channel.<\/p>\n #PeckShieldAlert<\/a> #FlorenceFinance<\/a> fell victim to a #AddressPoisoning<\/a> scam, resulting in a loss of ~$1.45M $USDC<\/a>. \u2014 PeckShieldAlert (@PeckShieldAlert) November 30, 2023<\/a><\/p>\n<\/blockquote>\n PeckShield reported that the transaction was sent to a phishing address instead of the intended address.<\/p>\n \u201cThis is an example of a scammer creating an address that resembles one to which the intended victim had previously sent funds.\u201d<\/p>\n<\/blockquote>\n The addresses are very similar, with the same beginning and end characters used to dupe the victim into sending to it without paying attention to the full address.<\/p>\n The attackers use an address generator to create a nearly identical address to the target\u2019s wallet address.<\/p>\n They will then send a tiny amount of crypto from the newly-created matching address wallet to the target\u2019s wallet to poison the transaction history.<\/p>\n The victim then mistakingly copies the poisoned address from transaction history instead of its own records and sends money to the hacker\u2019s wallet.<\/p>\n According to reports<\/a>, malicious actors have been abusing Ethereum\u2019s \u2018Create2\u2019 function to bypass wallet security alerts and poison addresses. This has led to the theft of around $60 million in crypto from almost 100,000 accounts in six months.<\/p>\n Florence Finance is an Arbitrum-based<\/a> real-world asset DeFi lending protocol that enables users to borrow digital assets against their real-world collateral.<\/p>\n According to the documentation, it uses stablecoin commitments to fund loans to real-world businesses and distributes the real-world yield back to the stablecoin funders.<\/p>\n November has been a busy month for DeFi and crypto hackers. On Nov. 30, PeckShield also reported that the Uranium Finance attacker was moving funds.<\/p>\n #PeckShieldAlert<\/a> #UraniumFinance<\/a> exploiter-labeled address has transferred 800 $ETH<\/a> (~$1.6M) to #tornadocash<\/a> pic.twitter.com\/XkqYV83YwX<\/a><\/p>\n \u2014 PeckShieldAlert (@PeckShieldAlert) November 30, 2023<\/a><\/p>\n<\/blockquote>\n According to the De.Fi Yield Rekt Database<\/a>, millions in crypto assets have been lost this month to hacks and exploits.<\/p>\n These include KyberSwap losing $45 million<\/a> in a flash loan attack on Nov. 23 and HTX losing $21 million in an access control exploit on Nov. 22.<\/p>\n Furthermore, Heco Bridge was exploited for $86 million this month, and Onyx Protocol lost $2 million in a flash loan attack.<\/p>\n <\/p><\/div>\n","protected":false},"excerpt":{"rendered":" On Nov. 30, blockchain security firm PeckShield reported that Florence Finance had been attacked. The protocol has reportedly lost $1.45 million in USDC in an attack called \u201caddress poisoning.\u201d At the time of writing, there were very few details about the hack and nothing on the Florence Finance X (Twitter) feed or Telegram channel. #PeckShieldAlert […]<\/p>\n","protected":false},"author":2,"featured_media":203512,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[230,225,221,227,226,228,229,60,223,224,222],"class_list":["post-203511","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-brave","tag-coinbase","tag-crypto","tag-decentralised","tag-decentralized","tag-decentralized-exchange","tag-erc-20","tag-featured","tag-meme-coin","tag-robinhood","tag-solana"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/203511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=203511"}],"version-history":[{"count":2,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/203511\/revisions"}],"predecessor-version":[{"id":203517,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/203511\/revisions\/203517"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/203512"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=203511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=203511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=203511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
Intended address: 0xB087cfa70498175a1579104a1E1240Bd947f5870
Phishing address: 0xB087269DE7ba93d0Db2e12ff164D60F0b3675870 pic.twitter.com\/x1BJ77lhFv<\/a><\/p>\nAddress Poisoning<\/h3>\n
\n
Big Month for DeFi Exploits<\/h3>\n
\n
\nBinance Free $100 (Exclusive): Use this link<\/a> to register and receive $100 free and 10% off fees on Binance Futures first month<\/b> (terms<\/a>).<\/div>\n<\/div>\n