Cross-chain DEX aggregator transit swap The weekend was rough after an exploit attack cost over $21 million in user funds.
An unidentified hacker has launched an attack against TransitSwap’s unverified smart contracts. October 1st Users who unknowingly authorized their tokens for trading on Transit Swap were transferring all their funds directly to the hacker’s address.
Transit Swap users lost a cumulative $21 million due to vulnerability exploits across the ETH and BSC chains.Hacker lost about $ 1,000,000 to the arbitrage bot when he moved the stolen funds.
Blockchain security company slow mist, pec shield, When bit raceworked closely with the Transit Swap team to track the hackers’ IPs, email addresses, and related on-chain addresses. Through their joint efforts, the hackers recovered more than 70% of the stolen funds. rice field.
📢📢📢 Latest on Transit Finance
1/5 Update the latest news about the TransitFinance hacking event. Through the joint efforts of all involved, the hacker returned approximately 70% of the stolen assets to his two following addresses.— Transit Swap | Transit Buy | NFT (@TransitFinance) October 2, 2022
At the time of writing, a total of $16.5 million in return funds is held in Transit Swap. ethereum & BSCMore address. Approximately 3180 ETH ($4.2 million), 1500 B-ETH ($2 million) and $10.4 million worth of BNB were returned. However, his stolen $3.5 million BNB is still held in his BSC address of the abuser.
Hackers reportedly moved 2,500BNB (worth $715,000) into the mixing protocol Tornado Cash and attempted to withdraw the funds through the LATOKEN crypto exchange.
TransitSwap hackers moved some of the stolen funds to Tornado Cash, stating: You can get $100 million by attacking other chains. You should get a higher reward than you do now. It’s hard not to doubt that this is an official backdoor. https://t.co/GNgDyG1FJD https://t.co/LxyUQOGXQg
— Wu Blockchain (@WuBlockchain) October 3, 2022
The Transit Swap team Has been updated They are still working to recover the stolen funds and will be in touch with users soon regarding the process of returning the funds.
