Uwerx network (https://www.uwerx.network/) compromised (or rugged?) a few minutes ago: https://twitter.com/hexagate_/status/1686660090072379392

www.uwerx.network

Uwerx. Disrupting The Freelance Industry

The popularity of freelance marketplaces has surged, not only due to the COVID-19 pandemic. Uwerx aims to revolutionize and reconceptualize the freelance industry by launching the first global, blockchain-powered freelance platform with a host of unique features…

Alchemix and Metronome DAO also been hacked due to a missing reentrancy locks on remove_liquidity and add_liquidity possibly due to a bug on an old Vyper compilers: https://twitter.com/hexagate_/status/1685677801813217280

JPEGd pETH has just been hacked due to a reentrancy in a Curve pool for 11 million USD.

https://twitter.com/DecurityHQ/status/1685646377198505985

The attacker was frontrunned by a MEV bot: https://etherscan.io/tx/0xa84aa065ce61dbb1eb50ab6ae67fc31a9da50dd2c74eefd561661bfce2f1620c

[Conic Finance Hacked]

Summary
Conic Finance was hacked for ~3MM

Current Status
Triaging

Timeline
10:35 AM - Hack tx (https://etherscan.io/tx/0x8b74995d1d61d3d7547575649136b8765acb22882960f0636941c44ec7bbe146)

Ethereum (ETH) Blockchain Explorer

Ethereum Transaction Hash (Txhash) Details | Etherscan

Ethereum (ETH) detailed transaction info for txhash 0x8b74995d1d61d3d7547575649136b8765acb22882960f0636941c44ec7bbe146. The transaction status, block confirmation, gas fee, Ether (ETH), and token transfer are shown.

APEDAO has just been hacked for $7k:

https://twitter.com/DecurityHQ/status/1681307025391906816

https://bscscan.com/tx/0x8d35dfd9968ce61fb969ffe8dcc29eeeae864e466d2cb0b7d26ce63644691994

Two tokens "9419" and "6827" deployed on BSC were just hacked for around $150k using a flashloan:

https://twitter.com/DecurityHQ/status/1680544938725892096

An attacker did a few mistakes before pulling off a successful tx: https://bscscan.com/address/0x6b7112097404e3d956195f04f75d0e48eb5a9858

BNB Smart Chain Explorer

Address 0x6b7112097404e3d956195f04f75d0e48eb5a9858 | BscScan

The Address 0x6b7112097404e3d956195f04f75d0e48eb5a9858 page allows users to view transactions, balances, token holdings and transfers of BEP-20, BEP-721 and BEP-1155 (NFT) tokens, and analytics.

Someone found a low hanging fruit on the mainnet:

https://twitter.com/DecurityHQ/status/1680117291013267456

https://etherscan.io/tx/0xfc872bf5ca8f04b18b82041ec563e4abf2e31e1fc27d1ea5dee39bc8a79d2d06

Ethereum (ETH) Blockchain Explorer

Ethereum Transaction Hash (Txhash) Details | Etherscan

Ethereum (ETH) detailed transaction info for txhash 0xfc872bf5ca8f04b18b82041ec563e4abf2e31e1fc27d1ea5dee39bc8a79d2d06. The transaction status, block confirmation, gas fee, Ether (ETH), and token transfer are shown.

https://twitter.com/hexagate_/status/1678669303623680002

Sus tx: https://polygonscan.com/tx/0x7320accea0ef1d7abca8100c82223533b624c82d3e8d445954731495d4388483

X (formerly Twitter)

Hexagate on X

Sus tx: https://t.co/DX5HH88sMj

[Aptos Twitter Hack]

Summary@Aptos_Network and @moshaikhs Twitter accounts were compromised

Current statusAccounts have been recovered

Timeline2023/07/067:52 PM UTC - @Aptos_Network tweets phishing link
8:04 PM UTC - Phishing URL merged into Metamask blocklist
8:13 PM UTC - Phantom is now blocking the phishing URL
~11:00 PM UTC - The accounts seem to have been recovered