VulcanForge announced the hack on Twitter and in its official Discord channel.“Over 4m PYR has been stolen from users’ wallets. It was premature to say this is [wallet management service] Venly’s end: we simply don’t know the cause,” the company wrote on Discord, asking users to move funds to Metamask, a popular wallet. “All funds stolen will be replaced once we’ve understood what’s happened.” Venly's CTO told The Block that its services were not compromised. “No words can do much right now, we know that,” the company wrote on Twitter.This is the third major theft of cryptocurrency in the last eleven days. The total amount of stolen cryptocurrency in these three hacks is around $404 million. On Dec. 2, it was BadgerDAO, a blockchain-based decentralized finance (DeFi) platform, which lost $119 million. The company is asking the hacker to please “do the right thing” and return the money. Then four days later, cryptocurrency exchange BitMart got hacked, losing $150 million.
“No words can do much right now, we know that.”
A VulcanForge staff member on Discord claimed on Monday morning that centralized exchanges (CEX) had been notified of the hack. "All the CEX we have partnered with are tracking the addresses and movement of funds. The funds would get seized by the exchange upon deposit," the staff member said.On Monday, the company said in a tweet that it had already refunded the majority of stolen PYR, and claimed that it had "isolated" all tokens stolen on centralized exchanges. “Those who knows [sic] VF history, knows [sic] this just makes us stronger,” the company wrote in another tweet. VulcanForge did not respond to an email asking for comment on how the hack happened. Subscribe to our cybersecurity podcast, CYBER. Subscribe to our new Twitch channel.
Do you research vulnerabilities on cryptocurrencies and their networks? We’d love to hear from you. You can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, Wickr/Telegram/Wire @lorenzofb, or email email@example.com