Another big crypto hack has rocked the industry. Infini, a crypto fintech company, lost $49 million in USDC, and the twist? The hacker was one of their own developers.
Blockchain security firm Cyvers revealed that the developer had secretly kept admin access to the project even after completing it. For over 100 days, there was no sign of trouble, but then out of nowhere, they funded their wallet through Tornado Cash, a crypto mixer often associated with suspicious activities.
After sending a small ETH transaction to cover gas fees, the hacker executed the attack, draining the entire contract.
wake of the Bybit hack, in which attackers drained approximately $1.5 billion from the exchange’s hot wallets. With two high-profile hacks happening so close together, serious doubts are being cast on our trust in developers and whether smart contracts are really secure.