wallet security

2 months agoNews Editor

Two Wallets Lose ~$187K Over Unrevoked 2024 Token Approvals

Two crypto wallets lost roughly $187,000 after leaving token approvals from 2024 in place, according to Odaily Planet Daily. The first loss involved SYN worth $124,000: the approval was signed in February 2024, the funds arrived on August 30, and they were moved out about 25 hours later. The second involved 62,489 USDC: the approval was signed in July 2024, the funds arrived on August 27, and they were transferred away roughly four days later. Additional details, including the wallets involved, were not disclosed.

1320

Scam Sniffer

2 months agoNews Editor

Scam Sniffer says two wallets lost about $187,000 after old approvals were left active

Scam Sniffer said on Sept. 1 that two wallets lost a combined roughly $187,000 because token approvals signed in 2024 had not been revoked. One case involved SYN worth about $124,000. The approval was signed in February 2024, the funds arrived on Aug. 30, and the tokens were moved about 25 hours later. The other case involved 62,489 USDC. That approval was signed in July 2024, the funds arrived on Aug. 27, and they were moved about four days later. The alert points to the risk of leaving old token allowances in place after assets reach a wallet.

1150

CoW Swap

4 months agoNews Editor 01

Blockaid Flags CoW Swap Frontend as Malicious, Urges Users to Avoid COW.FI

Blockaid warned that CoW Swap’s main site COW.FI may have been hit by a frontend attack, telling users to stop signing transactions and revoke token approvals if they had connected wallets.

850

Pons

4 months agoNews Editor

Pons says front-end was not affected, old Debank bridge tied to about $0.66 in losses

Pons, the launch platform on Robinhood Chain, said a potential token approval issue did not affect its Launchpad front end because the interface does not include the Multicall3 function in question. In a post on X, the team said the function existed only in the old Debank cross-chain bridge, a feature that predates the launch of Pons Launchpad. According to the statement, only 0.6 NOXA tokens have been affected so far, with an estimated value of about $0.66. As a precaution, users who previously used the old bridge were advised to revoke token approvals. Pons also said it is working with its auditor to investigate the issue and plans to restore front-end service as soon as possible.

2470

Pons

4 months agoNews Editor

Pons says launchpad front end had no Multicall3 feature, reports 0.6 NOXA affected

Pons, a launch platform on Robinhood Chain, said its launchpad trading page does not include any Multicall3 function, responding to earlier claims about a token approval vulnerability on its front end. The team said the Multicall3 function mentioned in a post was tied to an older cross-chain bridge on Debank Chain, not the Pons launchpad, and had been introduced before the launchpad went live. According to Pons, that means the issue does not affect launchpad users. The platform said the only asset confirmed to have been affected so far is 0.6 NOXA, worth about $0.66. As a precaution, Pons advised users who had used the legacy cross-chain bridge to revoke token approvals through revoke.cash. The team also said it is working with an audit firm to investigate potential risks and will restore the Pons front-end service after confirming that no actual vulnerability exists.

2250

BarnBridge

4 months agoNews Editor

BarnBridge Smart Yield old governance proposals flagged for token approval risk, Proposal 15 set for July 16

Odaily reported that BarnBridge Smart Yield’s older governance Proposals 14 and 15 carry token approval risk. If either proposal were executed or upgraded maliciously, existing token approvals could be put at risk. There is currently no confirmation that any funds have been taken. Users are being urged to review and revoke relevant approvals on Ethereum as soon as possible. Proposal 14 is in its executable grace period, while Proposal 15 has already been queued, with an on-chain execution time estimated at July 16, 09:23:58 UTC. Tokens listed as affected include USDC, DAI, USDT, GUSD, and RAI. The notice also warned users to rely only on trusted approval management tools, avoid links posted in replies or accounts claiming to offer support, and not send funds or sign transfers to any address.

1650

Blockaid

4 months agoNews Editor

Blockaid warns BarnBridge legacy proposals may expose token approvals

Blockaid has issued a community alert over legacy governance proposals #14 and #15 tied to BarnBridge Smart Yield, saying they carry token approval risk. The security firm said existing approvals could be put at risk if the proposals are executed maliciously or upgraded. No loss of funds has been confirmed so far, but users were urged to review and revoke related approvals on Ethereum as soon as possible. Proposal #14 is now in its executable grace period, while proposal #15 has been queued and is expected to execute on-chain at 09:23:58 UTC on July 16. Tokens named in the alert include USDC, DAI, USDT, GUSD and RAI, with the relevant contract addresses already disclosed. Blockaid also warned users not to trust links in replies or accounts claiming to offer support, and said revocations should only be carried out through trusted approval management tools.

1530

Bit.Fan