Private Key Exploit Leads to $6 Million Delta Prime Hack, Highlighting DeFi Security Gaps

Tech Report is one of the oldest hardware, news, and tech review sites on the internet. We write helpful technology guides, unbiased product reviews

Tech Report is one of the oldest hardware, news, and tech review sites on the internet. We write helpful technology guides, unbiased product reviews, and report on the latest tech and crypto news. We maintain editorial independence and consider content quality and factual accuracy to be non-negotiable.

The decentralized finance (DeFi) platform Delta Prime recently fell victim to a major cyberattack, which resulted in the loss of at least $6 million in digital currencies, according to an X post by on-chain security platform Cyvers.

The initial report indicated that Delta Prime lost approximately $4.5 million in crypto assets. However, subsequent waves of suspicious transactions brought the total loss to $6 million.

At the time of the report, Cyvers warned that the total loss would likely rise as the suspicious address linked to the attack continues to siphon funds from the platform’s liquidity pools.

As the ordeal escalated, another series of malicious transactions emerged following the initial loss of around $4.5 million. In total, the hacker drained nearly $6 million from the protocol, as highlighted in an X post by Chaofan Shou, the co-founder of blockchain security firm Fuzzland.

$6M drained now ;0

— Chaofan Shou (@shoucccc) September 16, 2024

This attack on Delta Prime is part of a troubling pattern of high-profile cryptocurrency hacks. Just two months earlier, a prominent Indian cryptocurrency exchange, WazirX, was hit by a massive breach, in which hackers stole over $230 million.

The WazirX hack is currently ranked as the second-largest cryptocurrency theft of 2024. This string of incidents highlights the growing threat to the crypto ecosystem.

According to Meir Dolev, Cyvers’s Chief Technology Officer, the Delta Prime breach likely originated from a private key exploit. This type of exploit typically involves unauthorized access to a private key essential for controlling wallets and smart contracts.

?ALERT?@DeltaPrimeDefi has faced a security incident on their admin keys. Attacker had control on the private key of 0xx40e4ff9e018462ce71fa34abdfa27b8c5e2b1afbthen he upgraded the proxy!

So far $5.93M has been drained!

Want to keep your company off our alerts radar? Learn… https://t.co/yOmNZJyp5l pic.twitter.com/7QJfVUZqSU

— ? Cyvers Alerts ? (@CyversAlerts) September 16, 2024

In Delta Prime’s case, the hackers gained control of the wallet that functioned as the administrator for the protocol’s proxy contracts. After gaining access, the attackers performed a malicious contract upgrade. They essentially reprogrammed the platform’s contracts to redirect to their fraudulent contract.

By doing this, the hackers could drain Delta Prime’s liquidity pools, which are hosted on the Arbitrum blockchain. This blockchain is a popular Layer 2 scaling solution for Ethereum.

At the last report, Delta Prime’s loss amounted to $5.9 million, with more potential damage looming as the hacker’s action could continue.

Speaking to Cointelegraph, Dolev outlined how this breach highlights a growing vulnerability within decentralized finance (DeFi) platforms. He focused more on contract security and private key management.

In this case, manipulating proxy contracts enabled the hackers to bypass regular security mechanisms. This reveals the inherent risks when developers fail to secure smart contracts properly against constant malicious upgrades.

North Korean Hackers Eye $53 Billion Bitcoin ETFs as Next Target, FBI Warns.

There is a growing concern that North Korean hackers, particularly the notorious Lazarus Group, may soon target high-profile financial products such as US-based Bitcoin ETFs.

These ETFs hold large reserves of Bitcoin, making them a lucrative target for cybercriminals. A successful hack could yield significant gains for bad actors.

Michael Pearl, Vice President of GTM strategy at Cyvers, expressed these concerns during an exclusive interview with Cointelegraph. According to Pearl, North Korean hacking groups’ shift in focus towards Bitcoin ETFs could be driven by the potential for large-scale financial rewards.

Pearl also referenced a recent warning from the FBI, highlighting the increasing likelihood that North Korean hackers will attempt to infiltrate and steal from these Bitcoin ETFs.

He explained that Bitcoin ETFs store large amounts of the cryptocurrency in custodial wallets. While these wallets are often highly secured, hackers are also plotting ways to bypass these defenses.

According to data from Dune, these ETFs collectively store approximately $53.4 billion worth of Bitcoin in on-chain holdings. Therefore, this immense value makes them highly attractive to cybercriminals, especially as they explore more sophisticated methods.