AirDAO, a decentralized autonomous organization, has fallen victim to a major theft. As a result of this theft, AirDAO has lost 35.2M AMB tokens and 125.51 ETH from its AMB/ETH Uniswap pool. The attack, executed through a social engineering scam, has raised concerns about the security of decentralized finance (DeFi) platforms.
AirDAO Responds Swiftly to Security Breach and Offers Conditional Incentive for Recovery
The AirDAO team disclosed the incident via Twitter, revealing that hackers gained access to the liquidity pool (LP) by exploiting a malicious attachment in an email impersonating one of their trusted partners. The hacker’s wallet address, 0xFD1754f6Cb9DA53c6F26E3E2eE3DE875CC11C7AA, has been identified, prompting AirDAO to collaborate with exchanges and authorities in the pursuit of retrieving the stolen assets.
In response to the breach, AirDAO has taken swift action, contacting affected exchanges to freeze the stolen funds. However, they have offered a conditional incentive, stating that if the hacker returns the funds promptly, a white hat hacking fee of 10% will be paid. Failure to cooperate will result in further legal action.
Fortunately, AirDAO reassures users that the theft is isolated to the liquidity pool. It has not impact funds held on the AirDAO blockchain or exchanges. Additionally, the AirDAO multisig remains secure and unaffected by the incident. Plans are underway to replenish the Uniswap LP with additional liquidity to mitigate any disruptions caused by the theft.
Security Firm’s Perspective on Decentralized Finance Security Amid Ongoing Investigation
Cyvers Alerts, a security firm, echoed AirDAO’s sentiments, affirming that the worst of the situation is over and promising updates on the investigation’s progress as more information surfaces.
🚨ALERT🚨@airdao_io experienced a breach, resulting in the loss of 126.5 $ETH and 41.61M $AMB. It appears the victim has lost access and control of its wallet!
The attacker has interacted with multiple exchanges including #Binance, #MEXC, #ChangeNOW, #KuCoin, and #BitMart.… pic.twitter.com/C0N3D1WLm4
— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) March 21, 2024
The incident serves as a stark reminder of the ongoing threats faced by decentralized finance platforms. Moreover, it highlights the importance of robust security measures to safeguard users’ assets against malicious actors. As the investigation continues, the crypto community eagerly awaits further developments in this evolving saga.