Delta Prime, a decentralized finance (DeFi) platform, has recently gone through a massive security breach and has lost over $6 million in digital assets. The hackers were successful in exploiting a vulnerability in the admin wallet of the platform, which resulted in the draining of several liquidity pools. This is another major attack on the DeFi sector that has witnessed several such attacks this year.
Attack Exploits Admin Wallet Vulnerability
The hacking of Delta Prime was said to have been as a result of the leakage of the admin private key of the company. Cyvers, an on-chain security platform, confirmed the attack in a post, explaining that the hackers gained access to the admin wallet of the platform. They then changed the smart contracts to divert the funds to a new contract controlled by the hackers.
Consequently, they withdrew funds from Delta Prime’s liquidity pools on the Arbitrum blockchain, which led to a loss of approximately $5.9 million.
Cyvers also established that the hackers had changed the USD Coin (USDC) into Ethereum (ETH) to cover their traces. Blockchain researchers have pointed out those pools that have been affected as DPUSDC, DPARB, and DPBTCb. Currently, the hackers continue to attack the platform, and the total amount of stolen funds may increase.
North Korean Link Suspected, But Unconfirmed
Rumors have been made towards the North Korea’s involvement in the attack as the group behind Delta Prime had employed IT professionals from the said country. According to blockchain investigator ZachXBT, the platform had earlier used the workers from North Korea but all the suspicious staff was terminated before the breach. However, there is no substantial proof that points towards the recent hack to be connected with North Korea.
The FBI recently issued a warning stating that North Korean hackers have been actively attacking cryptocurrency platforms and their employees through sophisticated social engineering. These strategies include coming up with fake circumstances that would lead to an organization releasing crucial information. As the investigation into the Delta Prime breach continues, North Korean cyber activity cannot be completely discounted.
Delta Prime’s Response and Security Measures
Delta Prime has not made any statement concerning the breach at the time of this writing. After the hack, the PRIME token, native to the platform, dropped by 6% and was trading at $1. The attack also raises questions about Delta Prime’s activities on the Avalanche network, but no weaknesses have been identified there.
Established in January 2023 on the Avalanche network, Delta Prime rapidly attracted more than $63 million in total value locked. The platform also was backed by some of the biggest investors like Avalanche, GSR Capital, Moonhill Capital, and Uplift.
The hack raises concerns about platform’s future and what measures the platform will implement to regain the users’ trust. Delta Prime will have to work on the vulnerabilities that were exploited during this attack. So that confidence of its clients and investors is restored.
Enhancing the measures in place for key management and enhancing the general security measures will be critical. In this regard, as the DeFi sector develops, it is essential for the platforms to enhance the security measures to protect these assets.
Ongoing Threats to the Crypto and DeFi Sectors
The attack at Delta Prime is the latest in a spree of attacks on crypto and DeFi protocols in 2024. Last month, a hacker withdrew more than $230 million from the Indian exchange WazirX. It was one of the biggest hacks of the year.
The following events highlight the risks in DeFi, a sector that continues to attract the attention of cybercriminals. In order to prevent these threats, the FBI recommends that companies not store information on crypto wallets on network-connected devices.
Firms should also put in place proper measures that can help in confirming the identity of an individual. Pre-employment tests or code execution on company equipment should not be allowed until clearance has been given.
