UvToken hacked for $1.45 million in latest crypto exploit

Quick Take

  • A multi-chain wallet project UvToken has lost $1.45 million in a smart contract exploit.
  • UvToken acknowledged the exploit, saying that its “staking project” was attacked.
 

Multi-chain crypto wallet UvToken has been hacked for 5,011 BNB tokens (1.45 million) and the funds have already been routed into sanctioned crypto mixer Tornado Cash. This comes amid a flurry of hacks and exploits this month, as October looks set to be a particularly bad month for DeFi projects.

The incident occurred on the BNB Chain blockchain on Thursday morning at around 1 a.m. ET time, as noted by security firms Ancilia and Peckshield.

UvToken acknowledged the exploit, saying that its "staking project" was attacked. It’s currently working with security teams to investigate the exploit. UvToken lets users stake the native token into a specific contract, which was targeted, PeckShield noted.

The attacker likely took advantage of the UvToken staking contract's failure to properly authenticate input data, PeckShield told The Block. The firm noted the contract may have contained a logic error that allowed the hacker to make a malicious call and seize the staked funds. 

THE SCOOP

Keep up with the latest news, trends, charts and views on crypto and DeFi with a new biweekly newsletter from The Block's Frank Chaparro

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

The latest exploit represents another addition to the list of exploits that have plagued the crypto sector this month. So far in October, the crypto sector has witnessed a series of security exploits, including a $100 million hack of BSC Token Hub and a $114 million attack on Mango Markets, among several other incidents.

 

© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

About Author

Vishal Chawla is The Block’s crypto ecosystems editor and has spent over six years covering tech protocols, cybersecurity, artificial intelligence and cloud computing. Vishal likes to delve deep into blockchain intricacies to ensure readers are well-informed about the continuously evolving crypto landscape. He is also a staunch advocate for rigorous security practices in the space. Before joining The Block, Vishal held positions at IDG ComputerWorld, CIO, and Crypto Briefing. He can be reached on Twitter at @vishal4c and via email at [email protected]

Editor

To contact the editor of this story:
Tim Copeland at
[email protected]