Galanis wrote on Twitter that he "Just got my Apple ID hacked". Although he didn't offer more details on how he had determined iCloud was to blame, it's likely he's referring to an attack vector where MetaMask automatically backs up users' seed phrases to iCloud unless it's disabled, meaning that a hacker who successfully accesses a person's iCloud account can also compromise any of their MetaMask wallets. The same type of attack saw a user lose $650,000 in April, and brought wider attention to the app's behavior.
Hacker compromises wallet of Steven Galanis, CEO of Cameo app, stealing $231,000
A hacker compromised the wallet belonging to Steven Galanis, the CEO of Cameo, an app that allows people to pay various celebrities to record short messages for them. The hacker took 9,457 ApeCoin (~$69,000), 2.3 ETH (~$3,900), a Bored Ape NFT, three Otherside land plots, and other various NFTs. The hacker then flipped the Bored Ape for 77 ETH (~$131,000), and the other NFTs for a combined 16 ETH (~$27,000).
Researchers identify an attack strategy actively being used by the second-largest Ethereum mining pool to earn outsized mining rewards
Researchers from The Hebrew University have identified an attack on the consensus mechanism used by Ethereum which they describe as risk-free and which can used to "obtain consistently higher mining rewards compared to the honest protocol". They also identified that the attack was being actively used by F2Pool's Ethereum mining pool to attack other mining operations. F2Pool is the second-largest Ethereum mining pool.
By manipulating the timestamps of blocks to be added to the chain, a miner can replace other miners' main-chain blocks with their own blocks, obtaining the fees that would have gone to the other miners. The attack has been called an "Uncle Maker" attack because Ethereum refers to valid but not main-chain blocks as "uncles".
F2Pool co-founder Chun Wang responded on August 8 to the allegations against his mining pool, apparently acknowledging their behavior and suggesting that manipulating a vulnerability in a system is not a "blatant disregard [of] the rules" as the researchers had characterized it. He tweeted: "We respect the *consensus* as is. If you don't like the consensus, convince [Ethereum developer Tim Beiko] to send me another Announcement and change it." Quote-tweeting a tweet by the lead author of the paper who described F2Pool's technique, he wrote, "I can't stop appreciate this elegant implementation of what we've done over the past two years... A robust system must withstand all kind of tests."
India freezes assets of WazirX, Binance's Indian exchange
India's Enforcement Directorate froze $8.16 million of assets belonging to WazirX, a Binance-owned cryptocurrency exchange that is one of the largest exchanges in India. According to the ED, its action was a result of an investigation into WazirX allegedly laundering the proceeds of a crime by allowing it to be converted into cryptocurrencies.
The ED wrote in a press release, " ED found that large amounts of funds were diverted by the fintech companies to purchase crypto assets and then launder them abroad...(a) maximum amount of funds were diverted to WazirX exchange and the crypto assets so purchases have been diverted to unknown foreign wallets".
Ian Macalinao revealed to have pumped the total value locked on the Solana ecosystem by pretending to be 11 developers working on over a dozen projects
CoinDesk revealed that eleven developers behind Solana projects including Sunny Aggregator and Cashio were all actually personas created by Ian Macalinao. Macalinao created the Saber protocol on Solana, and used his personas to build what appeared to be independent projects that all used Saber. In doing so, he was able to artificially inflate the apparent total value locked (TVL) on Solana by double-counting the same tokens. At their peak popularity, Saber and Sunny were responsible for the $7.5 billion of Solana's $10.5 billion TVL.
In an unpublished blog post where he confessed to his deception, he wrote, "I believe it contributed to the dramatic rise of SOL". He wrote the post shortly after one of his persona's projects, Cashio, was hacked for $52 million, but apparently shelved it.
Ian Macalinao's brother Dylan, the other co-founder of Saber protocol, aided in the scheme by lending credibility to Ian's various personas to those who had doubts about trusting money to projects led by pseudonymous individuals.
All told, Ian Macalinao was responsible for the Saber protocol, the Protagonist VC firm and incubator, and Ubeswap under his real name. He created Sunny Aggregator as Surya Khosla, Cashio as 0xGhostchain, Goki as Goki Rajesh, Quarry as Larry Jarry, TribecaDAO as Swaglioni, Crate as kiwipepper, aSOL as 0xAurelion, Arrow as oliver_code, Traction.Market as 0xIsaacNewton, Sencha as jjmatcha, and VenkoApp as ayyakovenko.
CoinGape and Binance publicize scam recovery address after Nomad hack
After the August 1 Nomad bridge exploit, Nomad created an address where people who took money out of the bridge could return it.
However, that was not the address that CoinGape published in their article titled "Breaking: Nomad Announces ENS Address And Bounty For Returning Funds" article, which was syndicated to Binance's news feed. Instead, they indicated that people should send funds to a different address, a scammer who had been sending on-chain messages to various people who took money out of Nomad during the exploit, asking they return it.
Although CoinGape removed the article fairly quickly, it remained live on Binance's site for over an hour. Fortunately, it doesn't appear anyone besides the writers have fallen for the scam, as no cryptocurrency has been sent to the address.
ZB crypto exchange exploited for more than $3.5 million
The self-described "world's most secure digital asset exchange", ZB, suffered an exploit in which attackers stole a large number of different cryptocurrencies, estimated by various researchers to be valued at around $3.6 million and $4.8 million.
ZB announced that they were suspending deposit and withdrawal services due to "sudden failure of some core applications".
Robinhood cites crypto market crash in decision to lay off 23% of employees
Stock and crypto trading app Robinhood announced they would be laying off 23% of their staff: 780 people. The layoffs followed a prior round of layoffs in April, which saw 9% of their staff (~342 people) out of jobs.
Robinhood CEO Vlad Tenev wrote, "Since that time, we have seen additional deterioration of the macro environment, with inflation at 40-year highs accompanied by a broad crypto market crash. This has further reduced customer trading activity and assets under custody. Last year, we staffed many of our operations functions under the assumption that the heightened retail engagement we had been seeing with the stock and crypto markets in the COVID era would persist into 2022."
The announcement came the same day that Robinhood was fined $30 million by the state of New York for insufficient anti-money laundering and cybersecurity protections in the crypto portions of their offering.
Thousands of Solana wallets drained in attack that nets over $6 million
Nearly 8,000 Solana wallets were drained for at least $6 million worth of assets, including native SOL tokens and SPL tokens like USDC. The attack went on for nearly a day before Solana identified the likely cause: private keys that were exposed to an application monitoring service used by the crypto wallet Slope. Both Solana and Slope were vague about further details but explained that they were continuing to investigate.
CoinShares investment firm reports $21.5 million loss from Terra collapse
In their Q2 earnings report, European cryptocurrency investment firm CoinShares reported that they'd only made $120,000 in net income in the most recent quarter, down from more than $32 million in Q1. They explained this was largely because of an enormous loss that resulted from the May collapse of the Terra ecosystem, costing the firm £17.7 million ($21.5 million).
- "CoinShares reports $21.7M loss tied to Terra implosion", Cointelegraph
Michael Saylor steps down as MicroStrategy CEO as the company reports a $918 million impairment charge on Bitcoin holdings
Bitcoin maximalist Michael Saylor announced he would be stepping down as CEO of MicroStrategy, which is ostensibly a software company but in recent years appears to be mostly a Bitcoin-purchasing company. Saylor is extremely pro-Bitcoin, with an emphasis on "extreme". In March 2021, when Bitcoin was at around $57,000, he urged people to "go mortgage your house and buy Bitcoin with it... if you've got a business that you love because your family works for the business and it's been in your family for 37 years, and you can't bear to sell it, mortgage it, finance it, and convert the proceeds into ... Bitcoin. If you're working for a company that's got $100m in the treasury, you ought to convince the CEO and the board of directors to convert the treasury into Bitcoin... that'd be worth billions to them."
Unfortunately, that treasury strategy — which in his case also includes taking on more debt to buy more Bitcoin — is not currently working out so well for MicroStrategy, which reported a $918 million impairment charge on their Bitcoin holdings in their most recent earnings report. Saylor stepped down as CEO the same day.