"1st LGBTQ+ Cryptocurrency" brings pinkwashing to crypto
Founders say they aim to help the LGBTQ+ community with a Spanish cryptocurrency project, "Maricoin". The team plans for the currency to be used for payment in a network of businesses have signed an "equality manifesto" promising to be queer-friendly. Critics of the project feel it's little more than pinkwashing, and many have criticized the name, which is based on a Spanish slur.
"No network can withstand the electricity consumption that is recorded there", says energy company chairman of the effects of cryptocurrency mining in Georgia
Board chairman of Energo-Pro Georgia, an energy company serving the Svaneti region of Georgia, wrote, "This can no longer continue. No network can withstand the electricity consumption that is recorded there." He called out the illegal cryptocurrency mining happening in the region, which has damaged the infrastructure so badly that he predicted it would take four to five years to fix. Miners have been taking advantage of free electricity provided to residents of the region, but the chairman wrote that the company was "approaching the decision" to begin billing residents for electricity to try to thwart the miners. In 2019, the company had been forced to go door-to-door with police to shut down mining operations, and in the process removed about $1.6 million worth of mining equipment.
Traders duped out of $1.8 million in a fake MetaMask governance token scheme
Scammers took advantage of rumors that MetaMask, a popular Ethereum wallet, would be airdropping governance tokens. The scammers created a fake MetaMask token, $MASK, and managed to inject code into the popular DEXTools trading app to show the token as verified. The token reached over $9 million in traded volume before scammers pulled the liquidity, making off with about $1.8 million worth of Ethereum.
- "Fake MetaMask Governance Token Soars 2600% and Gets Rug-Pulled", CryptoPotato
- "$1.8M Lost to Fake MetaMask Token Honeypot Scam", Crypto Briefing
Rapper Waka Flocka Flame has an OpenSea account hacked to the tune of $19,000
Waka Flocka Flame posted to Twitter: "@opensea One of me wallets was hacked wtf man". In a video, he showed NFTs in his OpenSea wallet, saying "This is fake, this is fake, this is fake, this is fake. They popped up in my wallet, I clicked on it to delete it, immediately they stole 19 grand. Happily I just started this wallet, they already stole 19,000 out of it. I need fucking help immediately."
MetaSwap Gas project rugpulls about $600,000
1,100 BNB, or around $600,000, were transferred out of the MetaSwap token MGAS, dropping the price of the token nearly 50%. The funds went to a Tornado Cash account, a popular cryptocurrency tumbler. After the transfer, MetaSwap Gas social media accounts were deactivated.
MetaDAO project rugpulls for more than $3.2 million
A project that promised to be "the DAO of DAOs" managed to accumulate and then make off with 800 ETH, which was worth around $3.2 million at the time of the scam. The project creators took the invested tokens and quickly tumbled them using Tornado Cash.
- "MetaDAO Makes Off With $3.2M in Rug Pull", Cryptobriefing
Another NFT project sells NFTs depicting real people without their consent
The "Cipher Punks" NFT project tried to sell NFTs with illustrations of various cypherpunks, or at least the ones that were listed on Wikipedia. The project said that it intended to "[honor] everyone involved in the CypherPunk movement. They are our heroes, and we need to recognize them". Apparently honoring them did not also involve asking for their consent to be used in the project, as Jillian York tweeted on December 26, "I don't approve of this whatsoever and would like it removed."
ItsBlockchain, the group behind the project, subsequently announced that they would scrap the project and apologized. This apology rang a little hollow, to me, after they retweeted a tweet saying "never meet your heroes" in reference to the individuals asking that the project stop using their likeness without their consent, for their own profit.JungleFreaks and Sandbox NFTs are stolen from a collector
bergpay.eth checked his MetaMask wallet on the day after Christmas only to discover that all his NFTs had been stolen, including five from the popular "Jungle Freaks" collection and 2 from "Sandbox". Jungle Freaks average about 0.9 ETH ($3,700) each; Sandbox NFTs average around 2.75 ETH ($11,300) each.
A DAO forms with the goal of "liberating" Blockbuster, hoping to raise $5 million from NFTs
A group called "BlockbusterDAO" emerged, with the stated goal of "liberat[ing] Blockbuster and form[ing] a DAO to collectively govern the brand as we turn Blockbuster into the first-ever DeFilm streaming platform". Ideas for the DAO's plans after buying the corporation included creating original films and also getting into crypto gaming, for some reason. Some outlets noted that it's unlikely Dish, the current owner of Blockbuster, would sell the corporation for any amount (and particularly for an amount $315 million less than what it bought them for ten years ago), but I suspect that minor detail is unlikely to slow the group down much.
Elon Musk tweeting a photograph of his dog in a Santa suit somehow pumps a memecoin
On Christmas, Elon Musk tweeted a very cute photograph of his pet dog, Floki, wearing a Santa suit with the caption "Floki Santa". Creators of a memecoin called "Santa Floki" ($HOHOHO, of course) capitalized on this with a claim that he'd been tweeting about their coin, and the token surged by 18,840% in about 48 hours (from $0.000000012935 to a whopping $0.00000245). The value quickly fell back below this new high, and settled back to around the pre-tweet price not long after.
An attempted governance attack aims to defraud 25 million MIR (about $64.2 million) from Terra's Mirror protocol
A scammer created a public poll on Mirror's official website, proposing to "Freeze the community pool in case of scam". However, if the poll passed, it would send 25 MIR to the poll creator. Because of the design of the poll system, Mirror can't remove the poll, and so has attempted to inform its community of the potential scam by creating a different poll, as well as tweeting about it. The governance platform shows a slew of polls, including, "Alert: Poll 211 is SCAM -- sending 25,000,000 MIR to itself", "Vote NO on fraudulent pools #185, ..., #208", "VOTE NO ON POLL 185 IT IS A SCAM", and "poll 205 is right ! vote yes !"
Steve Bannon touts a "Fuck Joe Biden" coin that looks designed to scam investors
Around the holidays, Steve Bannon started touting a "Fuck Joe Biden" ($FJB) coin (formerly known as the "Let's Go Brandon" coin, and not to be confused with the other Let's Go Brandon coin) on his podcast. He and his partners have touted investing in the currency as a way to somehow "let your feelings, your primal disapproval, your primal disgust with Biden be heard" (and certainly not just a way to pad Bannon's own pockets). Reviewers inspecting the coin's contracts observed some unusual features, including provisions that allow the currency's operators to manually lock an individual's token balance so they can't sell (how decentralized!), though this of course does not apply to the operators themselves. One reviewer observed how this could easily be exploited for rug pull purposes, if the operators locked token holders from selling as they sold off their own coins, allowing them to get out before others started selling off too.
NFT collector scammed out of Bored Ape NFT: "This was my kids college. My mortgage."
An NFT collector lost his Bored Ape NFT to a scammer impersonating the well-known NFT collector Jeffrey Huang, aka "Machi Big Brother". The real Huang did eventually buy the NFT off the scammer for 77 ETH (about $290,000) and agreed to sell it back to its original owner for that price. Although the original owner tweeted on December 30 that they were "trying to launch a project that will help me raise funds to buy back my ape that was stolen", the following day they seemed disillusioned with the whole space. They wrote, "Been trying to put on a good face since I lost my ape but I gotta be honest. This was my kids college. My mortgage. Just absolute shit that some of you out there think it's okay that I got ripped off. Fuck you if you think theft is okay because I wasn't 'smart' enough. I got news for you tool boxes. This space is going to zero and regulators are coming hard because the lay person isn't coming with the attitude of a lot of you. No one is coming to a space where they aren't sure there investments are safe. Good luck in the meta".
Open source contributors and advocates are surprised to find photographs of themselves being sold as NFTs
Some prominent open source advocates and contributors were surprised to find that their likenesses were turned into NFTs by an artist who photographed them in 2018. Kris Nóva tweeted, "What would you do if you woke up and found out somebody made an NFT of you? Because that just happened to me and a lot of other open source contributors and thought leaders." She later wrote that the photographer "ended up reaching out, his heart is totally in the right place." However, it still seems pretty gross to me that the NFT creator didn't check with the subjects before using their likenesses in the NFT project, and that he prominently featured Kelsey Hightower, an outspoken critic of web3 who I suspect would not approve of his image being used in such a way, in the branding for the project.
Funko Pop launches Bob Ross NFTs in apparent disregard of Ross's wishes
Because apparently the vinyl figurines known as Funko Pops aren't a sufficiently useless collectible, Funko decided to get in on the NFT craze by releasing a Bob Ross "Digital Pop". Ross made major changes to his will just before his death to try to prevent people from merchandising his legacy, and many fans were outraged by the NFT project, which they believe is exactly the sort of thing he was trying to prevent from happening.
Visor Finance is hacked for about $8.2 million
A reentrancy exploit in the Ethereum-based Visor Finance DeFi protocol allowed hackers to pull 8.8 million VISR tokens out of the network, equivalent to about $8.2 million. The VISR token went from trading at around $0.93 to around $0.04, losing more than 95% of its value. The Visor team subsequently announced that they would perform a token migration to compensate affected users. Visor has suffered other hacks since its launch earlier in 2021, despite having undergone several audits.
- "$8.2M Lost as Visor Finance Suffers Latest DeFi Hack", CryptoBriefing
Another Discord scam earns its perpetrators about $150,000
Another Discord scam netted its perpetrators around 800 SOL, or about $150,000, from 373 individuals. The scammer posted a fake minting link in the official Discord of Fractal, the upcoming NFT and blockchain gaming marketplace co-founded by Twitch co-founder Justin Kan. Fractal said it would be compensating all who fell for the scam. The scam was apparently made possible by a compromise of the "Grape Protocol" Discord tools, a hack that was also used to target members of the Monkey Kingdom NFT collection Discord that same day.
Traders hoping to get in on the "Monkey Kingdom" NFT collection are duped by a scam link in the project's official Discord
An NFT trader hoping to get in on the "Monkey Kingdom" NFT collection was duped by a scam link in the project's official Discord channel, and sent 650 SOL (about $116,000) to a scammer. "It is important money to my family: my wife, my son", the victim wrote on Twitter. Another person replied to the tweet to say they too had been duped by the Discord scammer, to the tune of about 19.5 SOL (about $3,500). In total, the phishing link netted the attacker about $1.3 million. The scam was apparently made possible by a compromise of the "Grape Protocol" Discord tools, a hack that was also used to target users of the Fractal project's Discord that same day.
Either a rug pull or a hack drains at least $1.8 million from Bent Finance
Bent Finance informed its users of a "possible exploit", but soon after issued a statement that the exploit had originated from the Bent Finance project's own deployer. Because of this, some speculated that it may have been a rug pull. Bent said in a statement, "There are multiple members on this team and we will make this right. We recommend you withdraw all funds until it is clear." The platform hasn't revealed how much money was lost, though a crypto fraud investigator wrote that 440 ETH (equivalent to about $1.8 million) appeared to have been funneled out of the platform. The attack was discovered on December 20, but appeared to have been ongoing since at least December 12, and possibly longer.
Dozens of users report money disappearing from their El Salvadoran Chivo Wallet accounts
A Twitter thread showed dozens of people reporting amounts from hundreds to tens of thousands of dollars disappearing from their Chivo Wallets, the Bitcoin wallet backed by El Salvadoran President Nayib Bukele. El Salvador adopted Bitcoin as legal tender in September of this year, where it is used alongside the U.S. dollar.
Grim Finance is exploited for $30 million
Grim Finance, the "compounding yield optimizer" DeFi platform, was hacked. According to them, attackers exploited a bug in the platform to perform a reentrancy attack that netted them $30 million. Grim, indeed. A cryptocurrency watchdog group, RugDoc, opined that the exploit was possible because of very basic mistakes in implementation, and wrote, "Hopefully all projects can draw lessons from this incident that there is much knowledge most experienced solidity devs have at hand. If you haven't acquired this yet, don't build multi-million dollar projects. Don't get audits from companies which everyone knows are useless." This was apparently a dig at Solidity Finance, who had performed an audit several months prior to the hack and found that "ReentrancyGuard is used in relevant locations to preent[sic] reentrancy attacks."
Adidas learns the hard way that limiting the number of NFTs one person can buy is hard
Anticipating that buyers would try to hoard items from a big-name NFT drop, Adidas decided to try to limit their NFT drop to two per buyer. They apparently didn't realize that there is no guarantee that one address = one individual, and a crafty blockchain engineer created a smart contract that generated additional smart contracts, each with their own address. These contracts snapped up NFTs, then transferred them to the engineer's primary wallet and self-destructed. The engineer was able to snag 330 NFTs.
Prominent comics artist says continuous theft of his work for use as NFTs may force him to close his DeviantArt gallery
Comics artist Liam Sharp wrote on Twitter that he would likely need to close his DeviantArt gallery, which he has maintained for fourteen years, because his artwork keeps being minted as NFTs without his permission. He wrote, "I can't - and shouldn't have to - report each one and make a case, which is consistently ignored. Sad and frustrating."
Multiple artists report OpenSea automatically closing their support tickets reporting stolen artwork; OpenSea removes ability to report
Artists going through the greuling process of reporting individual NFTs created without permission from their work reported tickets being automatically rejected. Artists were also required to provide personal information to OpenSea, who in some cases forwarded the personal information to the scammer behind the theft, opening the artist up to doxing and other harassment. Eventually, OpenSea disabled their contact form that had previously allowed artists to report stolen work.
S.T.A.L.K.E.R. 2 receives so much fan pushback on planned NFTs that the studio scraps the idea within a day
Pushback from fans led S.T.A.L.K.E.R. 2 creators to quickly reverse their decision to add NFTs to the game. The studio announced their NFT plans on December 15, which involved collectible cards, in-game items, having one's name added to walls or other scenery in the game, and even the possibility to have an NPC added to the game that resembled the NFT buyer. In subsequent updates the studio stressed that the NFTs would not be mandatory for gameplay, and later downplayed them further by saying that the NPCs they would add to the game "aren't even involved in the story". Fans were incensed, and the next day the studio scrapped "anything NFT-related" that was planned for the game.
NFT collector who owns the NFT associated with the Bored Ape artwork used in this site header would like me to stop using "their" ape
The apparent owner of Bored Ape #5262, of which this site header is a derivative work, contacted me on Twitter to say "I believe you are using my ape on your website without my permission. Can you please prove you own this ape as I believe there is only one looking like this and it is mine" in an event that truly transcended parody. While this would be hilarious even if it was a prank, the Twitter account who DMed me does appear to belong to the person holding the NFT on OpenSea.
Melania Trump announces an NFT collection which will begin with a painting of her "cobalt blue eyes"
Lest it be mistaken for a grift, the press release was quick to say that Mrs. Trump had promised to donate a portion of the proceeds to children leaving foster care. The NFT platform is "powered by Parler", a far-right social network. Trump intends to release multiple NFTs, and the first will have a starting price of 1 SOL (approximately $150). Solana Labs was quick to clarify that the "project is not part of any Solana-led initiative".
Tweet from a crypto miner answers the question of where all the GPUs went
Crypto miner Jaxson Davidson posted a video showing one of four buildings in his crypto mining farm, showing racks of thousands of GPUs — GPUs that gamers and other consumer buyers are finding painfully expensive, if available for sale at all. He said the GPUs were bought "under the table", for an average price of $1,200 per unit, and is using the farm to mine Ethereum and Ravencoin. Davidson deleted his Twitter account following some pretty fierce backlash from gamers feeling the GPU shortage, as well as crypto skeptics who were shocked at the display of energy expenditure.
Another typing error proves costly to an NFT collector
A misplaced decimal point caused an NFT trader to sell their "beloved" Doodle NFT for 0.37 ETH (about $1,500) instead of their intended 3.7 ETH (about $15,000). The trader tried begging on Twitter to buy back the NFT, then to get back "maybe the ETH i lost.. minus all royalties and such..". Two days later they posted, "well, i don't think i'll ever get back what i lost.. had to take a break yesterday to not go crazy over this. 3.7 ETH is a lot of money to lose for me." This happened two days after a different trader made a similar, $300,000 mistake.
Laurent Correia rug pulls $960,000 with his abandoned "Billionaire Dogs" NFT project
Laurent Correia, a French influencer and the creator of "Billionaire Tips" sports betting app, launched an NFT project called "Billionaire Dogs" in December. Promising perks including large cash giveaways and rare NFTs that would also grant luxury cars to their owners, the project launched on December 12. Buyers were invited to purchase NFTs for 0.1 ETH (~$400) in the presale, or 0.2 ETH (~$800) in the public sale.
The project had an underwhelming reception, and the team quickly decided to reduce the supply of available NFTs from 6,500 to 2,000. Two days after launch, the funds were transferred out of the project wallet and to various addresses, including $400,000 which went to Correia. The project also deleted their website, Discord, and Twitter account that week.
Correia, for his part, has continued to post on his "Laurent BILLIONAIRE" Instagram account, where he shows off his private jet and tropical vacations with no mention of the Billionaire Dogs Club. His "NFT" Instagram story shows his pricey NFT purchases beginning on January 14.
A hacker racks up a $45,000 AWS bill for their victim, only to generate $800 worth of Monero
A hacker gained access to someone's Amazon Web Services account and used it to spin up servers to run Monero miners, ultimately netting 6 Monero (XMR) worth a total of about $800 over the couple of weeks they were running. All this work, however, cost the hacked individual about $45,000 in AWS fees, providing a particularly salient example of why people don't typically use AWS to mine crypto. Fortunately, Amazon waived the bill for the owner of the compromised account.
Bug in major cryptocurrency trackers shows wildly inaccurate data
Some people were briefly elated or devastated when they looked at Coinbase or CoinMarketCap, both major cryptocurrency trackers. A glitch caused some cryptocurrency investments to appear to have surged in value by millions or billions of percentage points; others saw their investments appear to tank to nearly nothing. Some DeFi projects relying on data from Coinbase halted trading, and erroneous data from the glitch persisted into the following day. CoinMarketCap made light of the glitch on Twitter, writing, "How did it feel to be a trillionaire for a couple hours? 😂" Hopefully no one quit their job based on their mistaken windfall! At least one person speculated that bots relying on APIs from these services may have traded on the "market movement", and one project relying on their data reported losing around €300,000 (about $340,000) due to the relative value of their assets being inaccurate.
Fans are outraged when the Twitter account of now-deceased Stan Lee shills an NFT
Stan Lee fans were outraged when the Twitter account belonging to Lee, who died in 2018, posted a message to promote an upcoming NFT based on one of his characters. Fans fairly universally felt this was disrespectful to Lee's legacy and contrary to the values he'd held through his career.
Artist Loish searches her name on OpenSea and finds 132 NFTs created from her artwork without permission
Digital artist Loish discovered more than one hundred instances where people had created NFTs from her art without her permission, and had to spend hours reporting each individual NFT as copyright violations. She wrote on Twitter, "NFTs are supposedly about authenticity but these platforms (that's you, @opensea) do less than the bare minimum when it comes to making sure that the images are being uploaded by their ORIGINAL CREATORS."
A collection of NFTs seeks to profit off the murder of George Floyd, with no apparent connection to or approval from his family
Someone released a collection of poorly-made pixel art NFTs depicting the late George Floyd, whose murder by a police officer in May 2020 set off protests around the world. There was no apparent link to his family or any social justice charity; this was just a scam to make money off of the memory of a murder victim. One entry in the collection depicted Floyd as a police officer; another styled him as a Despicable Me minion. "To the people who think I'm super-racist, I would say I'm just an opportunist", said the creator.
Vulcan Forged users lose a collective $135 million in hack
Stolen private keys from the blockchain gaming platform Vulcan Forged enabled attackers to siphon funds out of just shy of 100 user wallets. Rather than users managing their own private keys, this is done by the platform, suggesting the issue was not user error. The project says it plans to reimburse users.
The Seattle Kraken NHL team, whose home stadium is named the Climate Pledge Arena, raise eyebrows with an NFT release
The Seattle Kraken announced that they would be releasing a set of NFTs. Although several sports groups have released NFTs, people were particularly surprised to see it coming from a team that is known for its environmental advocacy. Though the NFT release will be on a proof-of-stake blockchain that claims to be net-zero emissions (Avalanche), many were up in arms about the team engaging in something that they see as antithetical to environmentalism.
Typing error costs NFT trader nearly $300,000
An NFT trader made a typing error when entering a listing price, accidentally listing his Bored Ape NFT for 0.75 ETH (about $3,000) instead of 75 ETH (about $300,000). The NFT was instantly bought by a bot account. The BBC writes, "In traditional banking transactions, such errors are usually reversed easily if the bank facilitating them is told about the mistake quickly. But in the unregulated crypto-trading market, there is usually no way to reverse such a sale."
Fable creator Peter Molyneux announces an NFT game where you run a company town
Peter Molyneux announced a new game, Legacy, a business management simulator (fun!) where you join by buying an NFT called "Land", and compete to increase your "LegacyCoin" bank account balance. The company in the game effectively is running a company town, a real-world model with a history that is far more fraught than Molyneux acknowledges in his Verge interview.
Cryptocurrency exchange Ascendex hacked for $77 million
Ascendex lost $77 million in a hack targeting hot wallets. The platform said it would reimburse customers for all of their lost funds.
McDonalds NFT project overshadowed by a possible link to a racial slur
McDonalds tried to make a splash with a McRib-themed NFT project, but that was quickly outshined by the discovery that an early transaction to the Ethereum address associated with the collection contained a racial slur.
Crowdfunding website Kickstarter announces it will abandon its current platform in favor of a blockchain implementation
Kickstarter announced they have decided to create a decentralized version of their platform, and to create it on the Celo blockchain. This was not entirely well-received, and some major users strongly opposed the idea. Per Gizmodo, "How this will actually work, beyond Kickstarter being able to yell 'blockchain' like a spell to summon investors or maybe getting a cut of every project that runs on the resulting protocol, is unclear."
A "decentralized exchange", dYdX, is taken down in an AWS outage
During a widespread AWS outage, supposedly-decentralized DeFi platform dYdX went down. dYdX is an Ethereum exchange that touts itself as the "world's leading decentralized exchange", and indeed it is estimated to be the fourth largest exchange. Whether it's decentralized or not, however, is much more in question following the outage. Other major platforms (that are more known to run on centralized infrastructure) such as Binance and Coinbase were also affected by the AWS blip.
Ubisoft announces it will be shoehorning NFTs into its Tom Clancy game
Ubisoft announced that it would be adding NFTs to its Tom Clancy's Ghost Recon Breakpoint title, allowing players to buy "Digits": artificially scarce in-game weapons, vehicles, and cosmetics. The announcement video on YouTube sported a 96% dislike ratio shortly after, with the top comment accusing Ubisoft of "milking the Ghost Recon franchise for literally every cent while putting in minimal effort into the actual game itself". Many Ubisoft developers were also caught off guard: some were worried they would be forced to include NFTs in other game titles they were working on, while others raised environmental concerns that come with Ethereum NFTs. The project had a very underwhelming reception — two weeks after its launch, they had sold only fifteen of the more than 2,000 NFTs, for a total of around $400.
- "Ubisoft's NFT Announcement Has Been Intensely Disliked", Kotaku
- "Gamer-hate: Ubisoft’s new NFT project video gets 96% dislike ratio", Cointelegraph
- "Ubisoft's first NFT plans make no sense", Ars Technica
- "Ubisoft Devs Don’t Understand Company’s NFT Push, Either", Kotaku
- "No One’s Buying Ubisoft’s Garbage Ghost Recon NFTs", Kotaku
8ight Finance completely drained after private key leak
A compromised private key allowed an attacker to remove all funds from 8ight Finance's treasury, amounting to about $1.75 million. The team admitted to sending the key through Facebook chat and Google Drive, writing, "This is our first project, so we must admit our opsec [operational security] was low."
WildWorks angers its fans by announcing it will be moving into crypto gaming
WildWorks, a game company with a reputation for eco-friendliness, angered many of its fans when it announced it would be reusing the technology and assets from its partially-finished title Feral for a new metaverse game called Cinder. Some fans were upset to hear that the developers were apparently leaving Feral unfinished; many were angry about the developers' choice to embrace NFTs and crypto gaming — particularly after the company itself had decried the technology's impact on the environment, but also because of concerns about the unethical nature of many projects in the web3 space. Attempts to reassure fans with the fact that they will be using the Solana proof-of-stake blockchain, and purchasing carbon offsets, apparently did little to mollify fans, some of whom began cancelling subscriptions.
WildWorks later split Cinder into a separate company, Cinder Studios. However, in early 2023, the studio shutdown, giving its employees no advance notice that they would soon be out of a job.
Coindesk writer Andrew Thurman says the quiet part out loud
Thurman began an article by writing, "Yes, it's a Ponzi scheme. But who cares? So are the dollars in your pocket." He was writing about OlympusDAO, a "decentralized finance (DeFi) protocol whose primary use case seems to be 'making people extremely angry.'"
Polygon loses $2 million to a vulnerability
Polygon lost a bit over $2 million after a hacker exploited a bug involving a lack of balance/allowance check in their MRC20 contract. Polygon had been in the process of releasing a patch for the vulnerability, which had been reported by a white-hat hacker, and released an emergency upgrade the following day. The silent, zero-warning hard fork raised some eyebrows, and Polygon didn't release details until several weeks later. Polygon ultimately paid about $3.5 million in bug bounties to two white-hat hackers who submitted reports, which was far less than the total value of Polygon's $MATIC tokens, all 9.2 billion of which (worth around $24 billion) could have been stolen by an attacker using this vulnerability.
Tether mints $3 billion in two weeks
Tether minted more than $3 billion in a two week span. This brings the total amount of USDT (which is pegged to the U.S. dollar) to 76 billion, and much of it was minted this year. If Tether actually had reserves to back this up, as they claim, they would be one of the largest banks. However, as the Financial Times reported, in March 2021 "the stablecoin that used to say it was 100 per cent backed by cash reserves is in fact... 2.9 per cent backed by cash reserves".
Hackers steal about $200 million from BitMart
BitMart, "the most trusted cryptocurrency trading platform", experienced a major breach in which attackers stole approximately $200 million of various cryptocurrencies. The CEO attributed the exploit to a stolen private key, and promised to compensate users who were impacted.