3 entries tagged “bridge”.
About $81.5M was drained from the Orbit Bridge (by South Korea's Ozys) on Dec 31, 2023 – Jan 1, 2024, via weak withdrawal/signature validation. Ozys later said a former security chief had weakened its firewall weeks earlier and pursued legal action.
A BNB Chain lending protocol whose QBridge was exploited for about $80M on January 27, 2022. A logic flaw let an attacker mint unlimited 'qXETH' collateral without depositing any ETH, then borrow out the protocol's assets. Chainalysis later assessed it was likely North Korea-linked.
The cross-chain bridge Multichain saw about $130M moved out of its contracts in July 2023 in unexplained 'abnormal' transfers. The team said CEO 'Zhaojun' had been detained by Chinese police in May 2023, taking the protocol's keys with him; Multichain ceased operations.