Posts

Showing posts with the label attack

Compound DAO asleep at the wheel as $25M governance ‘attack’ passes

In what some have branded a ‘ governance attack ,’ controversial Proposal 289 passed a Compound Finance DAO vote yesterday, with a margin of 52% to 48%. The proposal grants 499,000 COMP tokens, worth $25 million at the time, to be sent to a goldCOMP vault created by a group known as the ‘Golden Boys.’ The price of COMP has dropped over 6% in the past 24 hours, according to data from CoinMarketCap. Potential governance attack on Compound seems to have passed.https://t.co/Uz2rteKvi6 — Michael Bentley (@euler_mab) July 28, 2024 Read more: Compound Finance and Celer Network websites compromised in ‘front-end’ attacks Compound is one of the longest-established lending platforms in the decentralized finance (DeFi) sector. Any decision about the running of the protocol must be made via on-chain governance, with votes being cast by owners of COMP tokens proportional to their holdings. While the proposal purports to be “an exciting new strategy designed to provide COMP hold...

Experts warn of ‘ticking bomb’ for supply chain attack

Experts from Aqua Security are calling for urgent attention to the public disclosure of Kubernetes configuration secrets. According to recent research, experts are warning that hundreds of source code projects and organizations are vulnerable to “ticking supply chain bomb.” Aqua analysts Yakir Kadkoda and Assaf Morag claim they found Kubernetes secrets in public repositories. They allow access to sensitive software development life cycle (SDLC) environments and pose a serious threat of supply chain attack . Those affected include two leading block chain firms and various other Fortune 500 companies that used the GitHub API to obtain all entries containing .dockerconfigjson and .dockercfg, which store credentials to access the container image registry. You might also like: Role of decentralization in ensuring security Of the 438 records are at risk of containing valid registry credentials, 203 records (around 46%) contained valid registry credentials. Of these, 93 pa...

Institutional crypto broker FPG halts withdrawals after $20M cyberattack

Floating Point Group informed customers that withdrawals had been halted after experiencing a security breach on Sunday evening. Cryptocurrency brokerage firm Floating Point Group (FPG) has confirmed it has halted trading, withdrawals and deposits on its platform after falling victim to a cyber attack on June 11. FPG estimates the attack resulted in a total loss of between $15 million and $20 million. According to a June 15 tweet from FPG’s official twitter account, upon discovering the security breach FPG locked all third party accounts and migrated wallets. It later halted trading, deposits and withdrawals out of “an abundance of caution.” 1/5 On Sunday, we experienced a cyber security incident. Upon discovery, we locked all third party accounts and migrated and secured all wallets until we better understand the scope and circumstances of this incident. — Floating Point Group (@fpgcrypto) June 14, 2023 Additionally, the firm noted that its account segregation “limited the...