$30M from Step Finance and $3M from CrossCurve:
#DeFi gets robbed again.
Tokens, predictably, nosedived straight into hell, losing up to 93% of their value.
โ On January 31, someone simply accessed Step Financeโs project wallets and withdrew 261,854
$SOL. No complex schemes โ the attacker just had stake management permissions. In practice, the project either had its private keys compromised, or someone on the inside opened the vault.
โ Then on February 1, a hacker fed a fake message to the CrossCurve Bridge contract and forced the bridge to unlock tokens. It turned out that anyone could trigger the withdrawal function.
Fun fact: while the market is going down, the number of hacks keeps going up. And somehow, thereโs a strange lack of loud investigations.
So yeah โ go ahead, invest in your cryptocerrency ๐