On July 18, 2024, the Indian exchange WazirX was hacked, and its multi-signature wallet was controlled by hackers to transfer virtual currencies with a total value of more than US$235 million.
黑客通过0x6eedf92fb92dd68a270c3205e96dccc527728066地址发起攻击，将交易所热钱包0x27fd43babfbe83a81d14665b1a6fb8030a60c9b4中的资产转移到黑客地址0x04b21735e93fa3f8df70e2da89e6922616891a88中，然后又通过0x90ca792206ed7ee9bc9da0d0df981fc5619f91fd和0x35febc10112302e0d69f35f42cce85816f8745ca两个地址将不同的虚拟货币在去中心化交易所交易为ETH, transferred to the address 0x361384e2761150170d349924a28d965f0dd3f092.
Figure 1: WazirX hacker attack and outflow of funds, source: search.ichainfo.com
According to search.ichainfo.com , there are 200 virtual currencies involved in this attack. As of July 19, 50 of them have been transferred by hackers and exchanged for ETH in decentralized exchanges, including:
Tether USD
Pepe
Gala
USDC
DENT
Render Token
OriginToken
Request
Contentos
Alchemy
SHIBA INU
Matic Token
FLOKI
Fantom Token
ChainLink Token
Fetch
Decentraland
SAND
HoloToken
1INCH Token
Uniswap
FTT
LoopringCoin V2
yearn.finance
Graph Token
UniLend Finance Token
Phala
BAT
JasmyCoin
ALICE
UMA Voting Token v1
Arbitrum
Spell Token
Reserve Rights
ApeCoin
Cream
Memecoin
Aave Token
Amp
Curve DAO Token
Immutable X
Beam
ZRX
COTI Token
Bluzelle
chiliZ
Axie Infinity Shard
Ankr Network
Biconomy Token
Quant
Taking Loopring (LRC) as an example, all 5640009 tokens obtained by hackers from the exchange were transferred to the address 0x90ca792206ed7ee9bc9da0d0df981fc5619f91fd, and then all were sold on Uniswap through this address. This also caused a great impact on the market.
Figure 2: Market volatility caused by WazirX selling LRC, source: tradingview
For investors, it is necessary to pay attention to the movements of other untransferred virtual currencies in the hackers address, which may have a significant impact on the market. Specific tokens include:
Gnosis
Chroma
CelerToken
Ooki Token
Frontier Token
Ethereum Push Notification Service
Cartesi Token
Reef.finance
OMG Network
Republic
Streamr
NKN
Civic
Alien Worlds Trilium
Loom Token
district 0x
FunFair
IOSToken
Livepeer Token
Compound
VIB
Threshold Network Token
DX
SushiToken
WOO
Illuvium
TokenFi
AlphaToken
Dusk Network
Hifi Finance
Lever
Ethereum Name Service
RLC
SKALE
Storj
Maker
Worldcoin
Audius
QuarkChain Token
Blur
PYR Token
Synthetix Network Token
BandToken
StormX
SuperFarm
YFII.finance
TomoChain
Golem Network Token
SelfKey
Pundi X Token
Dexe
Kyber Network Crystal v2
DODO bird
STPT
Clover
Tellor Tributes
Bounce Token
AdEx
Lido DAO Token
IDEX Token
AVA
Beta Token
NucleusVision
WAXP Token
Omni Network
Orchid
QuickSwap
Ondo
Boba Token
BUSD
Perpetual
Pendle
StatusNetwork
Wrapped MIR Token
Radicle
PIXEL
Flux
Ethena
Mask Network
pNetwork Token
Automata
Origin Dollar Governance
bitsCrunch Token
SuperRare
Alchemix
Numeraire
Dalarnia
Aragon Network Token
Adventure Gold
API 3
Paxos Gold
Chickencoin
EASY V2
BarnBridge Governance Token
Highstreet token
Balancer
PlayDapp
Measurable Data Token
Melon Token
PowerLedger
Aavegotchi GHST Token
ComboToken
ether.fi governance token
Bread
League of Kingdoms Arena
Open Custody Protocol
LQT
Bancor
EnjinCoin
Voyager Token
Yield Guild Games Token
IoTeX Network
The Force Token
FARM Reward Token
Linear Token
Metis Token
Marlin POND
eesee
LayerZero
Mettalex
dego.finance
Big Time
Rupiah Token
Walton
Swipe
OnX.finance
ARPA Token
Mantle
Galxe
PLANET
Pepe 2.0
MultiVAC
XDoge
SAITABIT
Metal
Switch
GreenMetaverseToken
BABYTRUMP
Tokenize Emblem
Dejitaru Tsuka
SPACE ID
Injective Token
Wrapped Pepe
CocosToken V2
CarryToken
Ocean Token
BOB
Smooth Love Potion
Lisk
ETH
By Auguste
Source: WazirX hacker still holds 150 tokens that have not been further transferred
