Crypto Blog
Radiant Capital has revealed new findings about the $50 million hack targeting its decentralized finance platform in October, attributing the attack to a North Korea-aligned hacking group.The breach, first discovered on October 16, 2024, prompted Radiant to partner with cybersecurity firms like Mandiant, zeroShadow, Hypernative, and SEAL 911 to investigate and mitigate the damage.
The sender convincingly spoofed a legitimate website, reducing suspicion. Once the file, titled Penpie_Hacking_Analysis_Report.zip, was opened, a macOS backdoor malware named INLETDRIFT was delivered. The malware communicated with an external server and appeared harmless by displaying a realistic PDF.
Despite Radiant’s adherence to rigorous security protocols, including transaction simulations and payload verifications, the malware evaded detection by manipulating front-end transaction data. Developers unknowingly signed off on malicious transactions, believing they were legitimate. The attackers’ planning rendered the intrusion nearly undetectable during routine checks.
zeroShadow, a Web3 security solutions provider, has also corroborated Radiant Capital’s assessment that the hack was the work of North Korea-linked actors. In a “We also attribute the Radiant Capital October 16 incident to DPRK with high confidence based on multiple indicators that we have gathered on and off chain. We have tracked the movements to Hyperliquid as stemming from Radiant users failing to revoke permissions, and not the initial incident’s stolen funds.”Radiant Capital is a decentralized lending and borrowing protocol that integrates cross-chain capabilities through the use of LayerZero technology.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Security Firms Swamped With Calls After UnitedHealthcare CEO SlainPrivate security firms have been inundated with calls since the cold-blooded murder of UnitedHealthcare CEO Brian Thompson ... but the high-profile case won't necessarily change how companies protect execs long-term, TMZ is told.
Read more »
FBI tells telecom firms to boost security following wide-ranging Chinese hacking campaignU.S. officials are urging telecommunication companies to boost network security following a Chinese hacking operation that gave officials in Beijing access to the private texts and phone conversations of Americans.
Read more »
FBI tells telecom firms to boost security following wide-ranging Chinese hacking campaignU.S. officials are urging telecommunication companies to boost network security following a Chinese hacking operation that gave officials in Beijing access to the private texts and phone conversations of Americans.
Read more »
Phone firms denying US military requests for security data, letter saysPhone firms denying US military requests for security data, letter says
Read more »
io.net, YOM Introduce DePIN for Web3 Gamingio.net, massive ecosystem of decentralized GPUs, teams up with cloud gaming pioneer YOM
Read more »
Web3 Giant Animoca Brands Expands Beyond Gaming, Dominates October InvestmentsCrypto Blog
Read more »