BTC Pulse 2025-06-25 09:52:32

Fuzzland Blames Ex-Employee for $2M Bedrock UniBTC Exploit Using Insider Malware

Ex-Fuzzland Staff Member Responsible for $2M Bedrock UniBTC Exploit Smart contract analysis platform Fuzzland has uncovered that a former staff member was behind a $2 million exploit on Bedrock’s UniBTC protocol in September 2024. In a transparency report , the attacker abused insider information, malware, and advanced persistent threat (APT) tactics to bypass sensitive internal systems and information. Malware and Social Engineering Facilitated Attack Fuzzland reported that the hacker employed social engineering, supply chain compromise, and malware to infiltrate its systems. The UniBTC vulnerability was first identified internally during an emergency call and then exploited. The attacker had installed backdoors on engineering workstations that granted long-term undiscovered access. It enabled them to access a vulnerability first unveiled in a report from security firm Dedaub. Even though the flaw was detected before, Fuzzland admitted that it was receiving lesser priority since it was producing so many false positive alerts. Compensation and Ongoing Investigations Fuzzland guaranteed that it had completely compensated Bedrock for losing $2 million and is working together with ZeroShadow in pursuing the breach. Reports have also been lodged with the FBI and Chinese government. In response to the exploit, Fuzzland teamed up with cybersecurity firms Seal 911 and SlowMist to heighten security levels across the DeFi ecosystem. The company emphasized that no customer or client data was hacked and that the attack was isolated in an alternate internal environment. Bedrock Recovers Despite the Attack Bedrock, a liquid restaking protocol that offers synthetic assets like UniBTC, UniETH, and UniIOTX, confirmed the exploit on Sept. 27, 2024. Despite losing $2 million on its decentralized exchange pools, the protocol’s total value locked (TVL) went up from $240 million in September 2024 to $535 million as of June 2025, according to DefiLlama. Rising Social Engineering Attacks Fuzzland’s reveal follows wider trends within the crypto security sector. Blockchain security company CertiK said that $2.1 billion has so far been lost to crypto attacks in 2025, with an increasing proportion attributed to phishing and wallet exploits. CertiK co-founder Ronghui Gu said that attackers are increasingly moving away from smart contract bugs towards human-focused attacks, including social engineering and insider manipulation.

Наиболее читаемые новости

Crypto.com Unleashes Robust $120M Digital Ass...
2025-06-25
ETH ETF flows impress, but Ether futures data...
2025-06-25
Cynthia Lummis sets 2026 goal for two crypto...
2025-06-25
Coinbase introduces wrapped Cardano and Litec...
2025-06-25
Young Americans lose out in Trump’s new budge...
2025-06-25
Cboe BZX Files Form 19b-4 With SEC to List Ca...
2025-06-25
Yuan vs. Greenback: China’s Quiet Campaign fo...
2025-06-25
Ethena Labs Secures Crucial BaFin Agreement f...
2025-06-25

Связанные новости

Прочтите Отказ от ответственности : Весь контент, представленный на нашем сайте, гиперссылки, связанные приложения, форумы, блоги, учетные записи социальных сетей и другие платформы («Сайт») предназначен только для вашей общей информации, приобретенной у сторонних источников. Мы не предоставляем никаких гарантий в отношении нашего контента, включая, но не ограничиваясь, точность и обновление. Никакая часть содержания, которое мы предоставляем, представляет собой финансовый совет, юридическую консультацию или любую другую форму совета, предназначенную для вашей конкретной опоры для любых целей. Любое использование или доверие к нашему контенту осуществляется исключительно на свой страх и риск. Вы должны провести собственное исследование, просмотреть, проанализировать и проверить наш контент, прежде чем полагаться на них. Торговля - очень рискованная деятельность, которая может привести к серьезным потерям, поэтому проконсультируйтесь с вашим финансовым консультантом, прежде чем принимать какие-либо решения. Никакое содержание на нашем Сайте не предназначено для запроса или предложения