Scam leads to loss of nearly $55.4 million in stablecoin DAI

Details:

The attack was first uncovered by investigator ZachXBT in a Telegram post, before CertiK confirmed the incident.

Inferno Drainer is one of the most popular phishing tools, tricking victims by simulating legitimate websites or emails that appear to come from cryptocurrency exchanges or decentralized finance (DeFi) protocols, ultimately leading to the compromise of sensitive information.

The attack specifically targeted Maker Vault, a collateralized debt platform that allows users to borrow the dollar-pegged DAI by posting collateral. CertiK reported that the attacker exploited a vulnerability to access the whale’s vault through the hacked account.

After the thief took $56 million worth of DAI, he changed the contract owner’s address to his wallet.

Earlier that week, investigator ZachXBT reported another hack that resulted in the theft of 4,064 Bitcoin (BTC), worth an estimated $238 million.

This large amount of Bitcoin was quickly moved across multiple platforms, including

THORChain, KuCoin, ChangeNow, and Avalanche Bridge, making it more difficult to track and recover the funds.