HomeBlockchainWallet tied to Uranium Finance hacker reawakens after 647 days, shifting $3.3M
Wallet tied to Uranium Finance hacker reawakens after 647 days, shifting .3M
Blockchain

Wallet tied to Uranium Finance hacker reawakens after 647 days, shifting $3.3M

0
0

One of the wallets related to the $50 million exploit of Uranium Finance in April 2021 seems to have awoken after 647 days of dormancy, with funds headed in direction of crypto mixer Tornado Cash.

The sudden transfer was highlighted on Mar. 7 by cyber safety companies PeckShield and CertiK on their respective alert accounts on Twitter.

According to knowledge from Etherscan, the hacker moved the two,250 Ether (ETH) or $3.35 million over a seven-hour interval in transactions starting from 1 ETH to 100 ETH — with all of the funds heading to Tornado Cash.

This is, nonetheless, simply one of many wallets related to the hacker. Another Ethereum pockets linked to the hacker exhibits it was final lively 159 days in the past, with 5 ETH being despatched to privacy-focused Ethereum zk-rollup on Aztec.

This marks yet one more event in 2023 by which a hacker’s pockets has come out of dormancy after a prolonged hiatus. In January, the Wormhole hacker moved round $155 million price of ETH nearly a 12 months after exploiting the Wormhole bridge for $321 million in early 2022.

The similar month, a infamous hacker dubbed the “blockchain bandit” additionally moved round $90 million after a six-year slumber. 

In February, the Wormhole hacker moved one other $46 million price of stolen funds, whereas standard blockchain sleuth ZacXBT highlighted through Twitter on Feb. 23 that “dormant funds left over” from the April 2018 $230 million Gate.io alternate hack by “North Korea began to move after over 4.5 years.”

Binance Smart Chain-based automated market maker Uranium Finance was exploited on Apr. 28, 2021. The hack itself was reportedly the results of a coding vulnerability that allowed the hacker to siphon $50 million throughout Uranium’s v2.1 protocol launch and token migration occasion.

The platform seemingly shut down shortly after the hack, with its final Twitter submit printed on Apr. 30, 2021 and urges customers to take away funds from its numerous liquidity swimming pools.

Unanswered questions

It can be price noting that on Apr. 28, 2021, somebody claiming to be a member of the undertaking’s improvement workforce prompt within the Uranium discord channel the hack might have been an inside job.

They outlined that solely a small variety of workforce members knew of the safety flaw previous to the v2.1 protocol launch, and questioned the suspicious timing of the hack being simply two hours earlier than launch.

Since then, studies have gone chilly on the undertaking and its victims. However, Binance discussion board posts from October 2022 recommend that customers have been ignored within the chilly.

Related: 7 DeFi protocol hacks in Feb see $21 million in funds stolen: DefiLlama

On Oct. 26, User “RecoveryMad” made a submit asking for a follow-up on the hack, and famous that the particular person representing the Uranium workforce in the neighborhood Telegram had “vanished.”

In response, consumer “nofiatnolie” claimed that “No investigation was performed. It was swept up under the rug. There are still victim groups with no answers and crowd-sourced investigations [are] pointing at the developers of Uranium and others as the suspects.”