Hackers Gained Access to Truflation, Carted $5 Million in Different Cryptocurrencies
Truflation disables staking, begins investigations into how the malware attack transpired
Truflation, backed by Coinbase, has issued a statement regarding a hack. The Truflation team has confirmed that the breach was the result of a targeted malware attack on their secure address. Initial reports suggest the attackers carted away 5 million dollars in crypto assets like EVM and Sol.
Truflation Malware Hack Investigation
The attack just a few hours ago targeted multiple chains from the treasury multisig and personal wallets. Cyvers, a crypto-security firm on their X handle stated:
“🚨ALERT🚨Our system has earlier today detected a suspicious transaction involving @truflation!
It seems that their #safe address has been compromised! Total loss is around 56,872,500 $TRUF worth of $4.6M”
ZachXBT, an independent investigator, also reported the hack and went a bit further in listing the wallets responsible for the thefts on his telegram channel.
The wallets were EVM theft addresses 0x53d2094b31429a13e739358b16354d8e0826b25a, 0x2122a76213b23daf633b850cb659750db0cac801, 0x4ec10144f1a96eed9b04d324d0997b5325c56472, 0x7ea07c76328fc789435fc77a2a4d527c5bbc333e, 0x3f8e5cc8abd032dd6ad652423e951ab06f833126
The Solana SOL theft address is 6v4R3z5ahHqx3pbxMpYQMu26cuQoonLX2Rqq7WF35yzp.
It remains unclear how the hackers managed to access Truflation’s secure address, the extent of the attack, or the precise quantity of assets that were stolen.
“We are currently monitoring the situation and are taking measures to protect funds while we are investigating and working with law enforcement. The Truflation team is actively working with leading industry partners to further clarify the incident and will continue to try to contact the attacker to recover the assets” Truflation on its official website announced
In the meantime, the Truflation team has disabled staking and limited liquidity on DEXs in a bid to arrest the situation.
Indian Crypto Exchange WazirX Loses Over $230M in Cyber Heist
Back in July 2024, WazirX, a prominent Indian cryptocurrency exchange, suffered a significant security breach, resulting in the loss of approximately $230 million worth of user assets.
The tweet, posted on September 26th, 2024, read: “We’re aware that one of our multisig wallets has experienced a security breach. Our team is actively investigating the incident. Thank you for your patience and understanding. We’ll keep you posted with further updates.”
However, the hack has sent shockwaves through the cryptocurrency market, as it represents one of the largest crypto exchange thefts ever recorded.
Furthermore, Cyvers Alert, a Web 3 security firm, was among the first to detect the attack, noting several suspicious transactions on WazirX’s Safe Multisig wallet on the Ethereum network.
