coinpedia.org
Unizen, a recognized player in the crypto exchange niche and trading platform, was exposed to security faults, which led to the loss of more than $2 million.
The attack technique was, according to the Slowmist security reports, related to an authorization of the trade aggregator working with the Ethereum (ETH) blockchain network. The hacker with the address 0xd3f64baa732061f8b3626ee44bab354f854877ac took advantage of an open external call vulnerability in the contract.
🚨SlowMist Security Alert🚨
— SlowMist (@SlowMist_Team) March 9, 2024
Due to an open external call vulnerability, @unizen_io has been exploited, losing around $2.1M. Please revoke approval for 0xd3f64baa732061f8b3626ee44bab354f854877ac ASAP!
Currently, the attacker has swapped the stolen USDT for DAI, but has not moved… pic.twitter.com/T0QARp0QkD
Currently, the attacker has swapped the stolen USDT for DAI but has not moved the funds further yet. Users are strictly advised to remove and revoke the approval of the address associated with the hacker to reduce further losses.
What next for the affected victims?
Unlike other projects, which are often seen as sluggish or remain inactive while a cyberattack is being carried out, Unizen brought forward its authenticity by immediately addressing this crisis. Swiftly in their response, the Unizen acknowledged the security incident and is working to fortify their security systems against flaws to avoid such hacks in the future.
To Our Valued Community
— unizen (@unizen_io) March 9, 2024
In light of the recent security incident, we're fully aware of the distress and inconvenience many of you are facing. This is a moment that tests our resilience, but more importantly, it's a call to action for us to stand together and navigate this…
The team has established a dedicated form to start the restoration process for those affected. This is a crucial step of the comprehensive plan to address user concerns. Users can fill in details like their wallet address or any other information that might help recover lost funds. The form can be found here.
Conclusion:
Security breaches in the crypto sphere are getting popular as hackers are actively seeking newer ways to find flaws in the system security of crypto networks. While every victim is waiting for further developments on the recovery of Unizen funds, users need to practice the best security practices for protecting their digital assets, such as owning hardware wallets, multi-factor authentication, and staying informed about the latest security threats.