Second, an implementation project for Ark Protocol, said its server was exploited on Monday, resulting in a loss of 0.75 BTC in company funds, or about $62,300. The team said user funds were not affected and that it fixed the issue within hours. It also said the attacker kept trying to withdraw more funds from the project and launched denial-of-service attacks after the initial exploit. On Tuesday, Second said the incident may reduce the ability of Bark-based wallets to receive Lightning Network transfers. According to the project, the flaw was in the Ark server boarding flow, which allowed an attacker to register and exit related boards using only their own signature while also spending the same set of VTXOs in the node through the Lightning Network. Second added that the attacker also tried to use bitcoin linked to the Sept. 19 security incident involving Blink Wallet, but that attempt did not succeed.
Second, an implementation project for Ark Protocol, said its server was exploited on Monday, leading to a loss of 0.75 BTC in company funds, or about $62,300.
The team said user funds were not affected and that the issue was fixed within hours. After that, the attacker continued trying to extract more funds from the project and also launched denial-of-service attacks.
On Tuesday, Second said the incident may weaken the ability of Bark-based wallets to receive transfers over the Lightning Network.
Where the flaw was found
According to Second, the vulnerability was in the Ark server's boarding flow. The attacker was able to register and exit related boards using only their own signature, while also spending the same set of VTXOs in the node through the Lightning Network.
Second also said the attacker attempted to use bitcoin associated with the Sept. 19 security flaw involving Blink Wallet, but did not succeed.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
