Saddle Finance had lost money once before, hours after it launched in January 2021. An individual was able to arbitrage Saddle Finance pools for a profit of around $275,000.
Saddle Finance loses more than $11 million to hack
An exploiter used a flash loan attack to pull 3,933 ETH (~$11 million) from the "decentralized automated market maker" Saddle Finance. Shortly after the attack, the hacker began moving the stolen funds through the Tornado Cash tumbler to launder the money.
- Tweet thread by PeckShield
- "Update on Saddle’s Launch", Saddle Medium
$80 million stolen from Fei Protocol and Rari
A hacker attacked multiple Rari liquidity pools relating to the Fei Protocol, exploiting a known re-entrancy vulnerability that exists on forks of the Compound protocol. The attacker stole more than $80 million from the projects.
Fei Protocol tweeted that they had paused borrowing to avoid further thefts, and offered a $10 million bug bounty if the hacker returned the money.
SEC files fraud complaint against NASGO organizers
The SEC charged four individuals with fraud violations in relation to their actions with NASGO, a company that created various tokens that the SEC has since described as unregistered securities. The defendants allegedly made claims that one of the tokens would increase in value by 10¢ every week, plus another 10¢ each time a new business joined their platform. The defendants also engaged in various other shady business, including hiring traders to trade the tokens amongst themselves to give the appearance of investor demand. This worked only until investors actually decided they wanted to cash out, causing the whole thing to fall apart because the market demand was faked. According to the SEC, NASGO misappropriated almost $4 million in investor funds.
- "SEC Alleges Fraud in Digital Asset Securities Offerings", U.S. Securities and Exchange Commission
Deus Finance exploited for $13.4 million in the second hack in two months
The defi project Deus Finance was hit with a flash loan attack that netted the hacker $13.4 million. The loss to the protocol was likely larger than what the hacker was able to withdraw, though Deus announced that no users had been liquidated and that "the loss is on the protocol".
Deus had suffered a similar attack in March, with an attacker using a flash loan attack to steal more than $3.1 million. Deus reimbursed users who were liquidated in the incident.
According to Deus' CEO, the exploit in this incident was not the same one used in the previous attack. He wrote on Twitter that the exploit was "the first of its kind, a zero-day exploit on Solidly [decentralized crypto exchange] swaps".
Central African Republic adopts Bitcoin as legal tender
The Central African Republic became the second country to adopt Bitcoin as legal tender, after El Salvador did the same in September 2021. It's a strange move, in a country where only 4% of people have Internet access, whose currency (the Central African CFA franc) is fairly stable, and which already has access to digital currencies via services like Orange Money.
The Bank of Central African States (BEAC) has expressed surprise at the CAR's choice, saying that they only learned about it along with the rest of the public. Two former prime ministers of the CAR co-authored a letter stating that adopting Bitcoin as legal tender without guidance from the BEAC was a "serious offence".
Scammers create fake Louis Vuitton NFT project
Scammers created a project on OpenSea with Louis Vuitton branding, which invited individuals to visit an external site to mint exclusive NFTs. They placed a blue checkmark on the project profile image to try to trick people into believing the project was verified, and they were able to manipulate the floor price to make it appear at a glance as though the NFTs could be traded for tens of thousands of dollars more than they cost to mint.
The project airdropped these NFTs to NFT whales, causing some trackers used by people who follow and imitate whales' behavior to believe the whales themselves had minted the NFTs. The site then used a random counter to make it appear that the NFTs were quickly selling out, causing people to quickly mint their NFTs in fear of missing out. One NFT collector recounted her experience falling for the scam, buying five of the NFTs for a total of 0.6 ETH (~$1700) in hopes of striking it rich on a newly-launched project before it became widely known.
An examination of the website source code shows that the project is reusing code from a different scam based around World Cup themed NFTs.
Representative Madison Cawthorn faces accusations of insider trading and disclosure violations related to Let's Go Brandon coin
North Carolina Representative Madison Cawthorn was one of several influential people who helped to promote the "Let's Go Brandon" memecoin, which has since become the subject of a class-action lawsuit due to a reported pump-and-dump scheme. Cawthorn is not named in the lawsuit, but he may face his own troubles: although he has claimed to own the currency, he has never publicly disclosed any stake in the coin as is likely required by ethics legislation. Cawthorn also commented "Tomorrow we go to the moon!" on a post about the coin from his official Instagram account, the day before the team of NASCAR driver Brandon Brown announced the cryptocurrency would be the primary partner for the 2022 season. "This looks really, really bad," said governmental watchdog group member Dylan Hedtler-Gaudette. "This does look like a classic case of you got some insider information and acting on that information. And that's illegal."
Fidelity plans to allow people to put retirement savings into Bitcoin
Financial services company Fidelity announced its intentions to allow people to put some of their retirement savings into Bitcoin in the near future, despite the Department of Labor's urgings otherwise. It is concerning to see a large financial helping to normalize the idea that cryptocurrencies are an "investment".
The Employee Retirement Income Security Act of 1974 requires plan fiduciaries to act solely in the financial interest of plan participants, and the U.S. Department of Labor issued guidance in March reminding plan fiduciaries of this duty, urging them to "exercise extreme care before including direct investment options in cryptocurrency". In a blog post shortly after, the DoL wrote that they had "serious concerns" about plans that would expose participants in cryptocurrencies and related products, outlining risks including valuation concerns, obstacles to making informed decisions, price volatility, and a still-developing regulatory landscape.
A Fidelity executive said that the company "believe[s] they should withdraw that guidance".
MetaDocs NFT project wants TikTok-famous doctors to diagnose you, but they don't have a license
Buy the $570 NFT and you'll get access to "celebrity doctors" who have amassed followings on apps like TikTok. Promising to "provide access quality doctors without all the usual red tape", the project has lofty dreams including one day providing metaverse diagnoses with remote examinations delivered using haptic suits... somehow.
Whether they actually get close to that dream very much remains to be seen. The project has faced several setbacks, including complaints from doctors whose likenesses were used without permission, and lack of any telemedicine license that would allow doctors to actually provide remote medical services. The project has also faced criticism for hosting "Ask a Doc" chats where physicians answered various questions without clarifying they weren't providing medical advice, for listing "physicians" in their whitepaper who were still completing residency, and for pledging to donate its first $1 million in revenue to an autism-related charity which has promoted the false claim that vaccines cause autism and has described autism as a disorder that needs to be "cured".
Reggie Fowler pleads guilty to fraud in Crypto Capital case
Reggie Fowler, a businessman and former pro football player who worked for the Panama-based Crypto Capital Corp., pled guilty to various charges involving bank fraud, wire fraud, and conspiracy. Crypto Capital Corp. was a shadow bank that allegedly enabled crypto exchanges and criminal enterprises to access the traditional banking system. At the time, crypto exchanges were largely excluded from traditional finance due to the potential exposure to money laundering. CCC is perhaps best known for its ties to Bitfinex, and for losing funds in an incident that Bitfinex was fined for attempting to cover up.
After initially rejecting a plea offer that would have allowed him to plead guilty to one felony if he forfeited up to $371 million, Fowler ultimately decided to enter an open plea to the charges against him and skip a trial. He pled guilty to five charges: bank fraud, conspiracy to commit bank fraud, operating a money transmitter business, conspiracy to operate a money transmitter business, and wire fraud. Fowler faces a maximum sentence of 90 years in prison.