Two Breaches Dominate the Month 😈
The Bitget hit clocking around $387 million plus the Liquid Network grab of about $320 million with $285 million bounced back now sit as the year’s top two crypto thefts even overtaking those Drift and KelpDAO plays 🔥. Rip those out tho and the leftover 53 hacks only scrape together $59 million which is less than half of last month’s tally 🖤. PeckShield noted this shift right here with their fresh alert tweet below for the real tea. Bitget flagged shady transfers outta parts of their hot wallets at 18:31 UTC on September 24 while CEO Gracy Chen spilled that some backend system got breached and spoofed all the transaction data to trick the auth flow 🪄. She straight ruled out any private key drama and confirmed cold wallets holding most assets stayed untouched lmao. The exchange is covering it all from their User Protection Fund sitting over $464 million.Laundering Trail and Smaller Losses 🕸️
SlowMist dropped an update on September 29 showing North Korea linked hackers laundering those Bitget funds by mixing CoW Protocol orders with Chainflip deposits turning everything to BTC then slapping CoinJoin on top to hide the trails 👀. Their founder Cos pointed out how anti money laundering checks are lagging behind those automated scripts rn 💉. Chainflip is already blocking flows and rejected at least one deposit while refunding instead of freezing. The other eight in PeckShield’s top 10 ranged from $3.15 million down to $7.81 million with a front run on the MEV bot yoink getting returned fully. Payment Processor V2 plus that LimitBreak contract from the September 25 white hat rescue made up $6.6 million of which $3.4 million bounced back already. Security researcher Quit pulled 23,155 NFTs worth nearly $6 million from exposed wallets during the op while one exploit path left 660WETH unrecovered.Just another echo from the void by iconofsin.eth 💖

