Crypto exchanges CoinDCX and BigONE lost a combined $71 million in separate incidents last week, both originating from what appear to be infrastructure-level failures that allowed attackers to access hot wallets.
According to blockchain security firm Blockaid, neither case involved smart contract exploits. Instead, attackers seem to have bypassed controls at the wallet level due to assumptions that internal systems and signers were inherently secure.
“Control handed to attackers because the infrastructure assumed the signer was inherently safe,” the firm wrote in an X thread.
To continue reading this as well as other DeFi and Web3 news, visit us at thedefiant.io