$4.4 mn stolen in attack on blockchain infrastructure Meter


San Francisco, Feb 6 (IANS): US-based Blockchain infrastructure company Meter has said $4.4 million was stolen during a cyberattack on the platform that started on Saturday morning.

The company said it manages an infrastructure that allows smart contracts to scale and travel through heterogeneous blockchain networks. The Meter network, as well as the Moonriver network, were affected by the hack, reports ZDNet.

Blockchain research company PeckShield confirmed that 1391 ETH and 2.74 BTC were stolen during the incident, the report said.

Around 2 pm ET on Saturday, the company said it was hacked and urged users not to trade unbacked meterBNB circulating on Moonriver.

"We have identified the issue: Passport has a feature to automatically wrap and unwrap gas tokens like ETH and BNB for user convenience," the company explained.

"However the contract did not block direct interaction of the wrapped ERC20 tokens for the native gas token and did not properly transfer and verify the correct number of WETH transferred from the callers' address. We are working on compensating funds to all affected users," it added.

By 6 pm ET, Meter wrote that it stopped all bridge transactions and discovered that the issue related to a bug "introduced in the automatic wrap and wrap of native tokens like BNB and ETH extended by the Meter team".

According to Meter, its extended code "had a wrong trust assumption" that let the hacker fake BNB and ETH transfers by "calling the underlying ERC20 deposit function".

They are working with authorities and said they found "some early traces of the hacker," urging the culprit to return the stolen money.

On Wednesday, $324 million was stolen through the popular decentralized cross-chain message-passing protocol Wormhole.

 

  

Top Stories


Leave a Comment

Title: $4.4 mn stolen in attack on blockchain infrastructure Meter



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.