Tapioca Foundation Offers $1 Million Bounty To Attacker

Binance News · 2024-10-21T02:13:59.000Z

According to Cointelegraph, the Tapioca Foundation has proposed a $1 million bounty to an attacker who stole $4.7 million from its decentralized finance protocol in what it described as a 'social engineering attack.' The foundation made the offer in an onchain message to the attacker's crypto wallet on October 20, suggesting the attacker could legally keep the bounty if they returned the remaining $3.7 million. The bounty, offered in Tether (USDT), is significantly higher than the typical 10% offered in such cases. The attack, which occurred on October 18, involved the theft of 591 Ether (ETH) and $2.8 million worth of USD Coin (USDC). The attacker compromised the ownership of the vesting contract for Tapioca DAO Token (TAP) and the UDSO stablecoin, allowing them to claim and sell vested TAP and mint an infinite amount of USDO, draining a liquidity pool for USDO and USDC. Tapioca co-founder Matt Marino revealed on October 19 that the attack was a result of fellow co-founder 'Rektora' being phished. Rektora had downloaded malicious software during an interview process, which replaced a transaction with a malicious one, granting the attackers access to the contracts. Marino later claimed that the foundation had 'hacked the hacker' and recovered 1,000 ETH, worth over $2.7 million, which was collateral backing the USDO stablecoin for a liquidity pool. The attacker withdrew nearly 30 million TAP tokens from the vesting contract, swapped them for about $1.5 million worth of ETH, converted that into USDT, and sent the funds to the BNB Chain, where they remain. The attack has caused the TAP token to lose nearly all its value, currently trading at 2 cents, down from around $1.40 prior to the attack, according to CoinGecko.

據 Cointelegraph 報道，Tapioca 基金會已向一名攻擊者提供 100 萬美元的賞金，該攻擊者從其去中心化金融協議中竊取了 470 萬美元，基金會稱此舉是“社會工程攻擊”。該基金會於 10 月 20 日在一條鏈上消息中向攻擊者的加密錢包發出了這一懸賞，暗示如果攻擊者歸還剩餘的 370 萬美元，他們就可以合法保留賞金。以 Tether (USDT) 提供的賞金明顯高於此類案件中通常提供的 10%。
此次攻擊發生在 10 月 18 日，涉及盜竊 591 個以太幣 (ETH) 和價值 280 萬美元的 USD Coin (USDC)。攻擊者竊取了 Tapioca DAO Token (TAP) 和 UDSO 穩定幣的歸屬合約所有權，使他們能夠索取和出售歸屬的 TAP 並鑄造無限量的 USDO，從而耗盡了 USDO 和 USDC 的流動資金池。
Tapioca 聯合創始人 Matt Marino 於 10 月 19 日透露，此次攻擊是由於聯合創始人“Rektora”遭到網絡釣魚。Rektora 在面試過程中下載了惡意軟件，將交易替換爲惡意交易，從而允許攻擊者訪問合約。Marino 後來聲稱，該基金會已經“攻擊了黑客”，並收回了 1,000 ETH，價值超過 270 萬美元，這是支持 USDO 穩定幣的流動性池的抵押品。
攻擊者從歸屬合約中取出了近 3000 萬個 TAP 代幣，將其兌換成價值約 150 萬美元的 ETH，將其兌換成 USDT，然後將資金髮送到 BNB 鏈，並留在那裏。據 CoinGecko 稱，此次攻擊導致 TAP 代幣幾乎全部貶值，目前交易價格爲 2 美分，低於攻擊前的 1.40 美元左右。

實時新聞

熱門文章