Blockchain safety auditor Hacken has confirmed a serious exploit involving unauthorized HAI token minting on Ethereum and BNB Chain.
On June 21, a compromised personal key allowed a malicious actor to mint 900 million HAI tokens, which have been subsequently dumped on decentralized exchanges.
In line with Hacken, the personal key was compromised whereas the corporate was making architectural modifications to its blockchain bridge infrastructure. These updates have been supposed to boost safety, however throughout the course of, a key linked to a contract with minting privileges was uncovered.
Hacken’s blockchain bridge, which is designed to facilitate token transfers between networks like Ethereum and BNB Chain, was constructed at a time “when the market and tech regarded very completely different,” the agency stated in its post-incident replace.
“Redesigning a deployed bridge means migrating contracts — a posh authorized and technical course of,” it added.
In response, Hacken revoked the affected minter account’s entry and paused bridge transactions throughout each Ethereum and BNB Chain.
However, the attacker managed to stroll away with an estimated $250,000 in realized losses, although their capability to dump extra was restricted by low liquidity.
The workforce has urged customers to keep away from interacting with the token till additional discover and warned that any airdrop claims circulating on-line are scams.
Following the incident, Hacken CEO Dyma Budorin acknowledged accountability, stating that the shortage of a multisig bridge infrastructure contributed to the breach. He reassured neighborhood members that Hacken’s core infrastructure stays safe and unaffected.
Budorin additionally introduced that tokens bought on Ethereum and BNB Chain after the hack wouldn’t be supported within the undertaking’s upcoming tokenomics replace. A snapshot has been taken to trace reliable person balances, with a migration path to be introduced.
In the long run, Hacken goals to restructure HAI right into a regulated monetary instrument combining token utility with fairness rights. Budorin stated the breach has accelerated plans to transform HAI right into a safety token representing Hacken fairness.
HAI’s worth plunged almost 99% following the breach, dropping from $0.015 to $0.000056 earlier than partially recovering to $0.00967 on the time of writing.
As beforehand reported by crypto.information, a Hacken report final 12 months discovered that entry management vulnerabilities, together with personal key leaks, have been the main reason behind crypto hack losses in 2024, accounting for 78% of whole damages.
