Details of the Attack and Preparation

Blockchain analyses show the attacker funded their account stealthily with small 0.1 ETH transfers through Tornado Cash to avoid detection. Coinbase executive Conor Grogan said the attacker stored at least 100 ETH in Tornado Cash smart contracts and that those funds may link to earlier hacks. Grogan stated, “Hacker seems experienced: seeded the account with 100 ETH and operated with 0.1 ETH Tornado Cash transfers. No opsec leaks.” This behavior clearly points to a professional actor who prepared ahead of time. Balancer announced it would offer a 20% white‑hat bounty if the stolen funds were returned in full (minus the reward).

What Makes the Balancer Hack Unique

Deddy Lavid, co‑founder and CEO of blockchain security firm Cyvers, called the Balancer exploit one of the most sophisticated attacks of 2025. The attackers bypassed access control layers to manipulate asset balances directly. This represents a critical failure in operational governance rather than a flaw in core protocol logic.

Lavid also warned that static code audits are no longer enough. He urged platforms to implement continuous, real‑time monitoring to detect suspicious flows before funds are drained.

, co‑founder and CEO of blockchain security firm Cyvers, called the Balancer exploit one of the most sophisticated attacks of 2025. The attackers bypassed access control layers to manipulate asset balances directly. This represents a critical failure in operational governance rather than a flaw in core protocol logic.

Lavid also warned that static code audits are no longer enough. He urged platforms to implement continuous, real‑time monitoring to detect suspicious flows before funds are drained.

Lazarus Group and Long‑Term Preparation Strategies

Similarly, North Korean group Lazarus reportedly paused illicit activity for months before the Bybit hack. Chainalysis data showed a sharp decline in cybercriminal activity after July 1, 2024, which experts interpreted as regrouping to identify new targets and probe infrastructure.

In the Bybit incident, attackers laundered the $1.4 billion through THORChain within 10 days. That operation demonstrates how months‑long stealth and preparation can precede large, professionally executed exploits—parallels that highlight the seriousness of the Balancer incident.

Recommendations for Balancer Users

Store crypto assets only in trusted wallets and avoid moving large sums in single transactions. Be aware that using Tornado Cash and similar mixers can draw attention from professional attackers and investigators, and consider employing multi‑layer security practices to reduce exposure to sophisticated on‑chain exploits.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Was the Balancer DEX Hack Prepared Months in Advance? appeared first on Coin Engineer.

Hack Details and Impact 

Abracadabra Money has now been attacked for the third time in the past two years. In 2024 and 2025, it lost $6.49 million and $13 million, respectively. According to blockchain researchers @officer_cia and Weilin William Li, the attacker exploited a vulnerability in Abracadabra’s smart contracts. Around $1.7 million in MIM tokens was withdrawn and swapped for ~395 ETH. 

• All affected smart contracts have been paused. 
• The attacker bypassed payment controls to quickly transfer the funds. 
• Abracadabra team has not yet released an official statement. 

Market Reaction and Precautions 

Abracadabra Money previously lost $13 million in a March 2025 hack. The recent attack has increased community calls for stress tests and comprehensive smart contract audits. 

According to CoinMarketCap, Magic Internet Money (MIM) saw a 16.98% drop in trading volume. The 60-day price decline reached 40.26%, while the 90-day increase recorded 19.83%. This underscores the sensitivity of investor confidence. 

The incident reignites discussions on security measures in the DeFi sector. Experts emphasize that proactive security testing and rigorous smart contract audits are critical. 

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post DeFi Protocol Abracadabra Money Loses $1.7M in Hack Attack appeared first on Coin Engineer.

Details of the NGP Token Hack 

The attacker manipulated the price using the PancakeSwap BUSD-NGP pool after buying NGP tokens at low prices. During this process, the maximum purchase limit and buyer waiting time were bypassed using a “DEAD” address. Subsequently, BUSD was withdrawn, draining the liquidity pool. This caused a sudden spike in NGP token price while resulting in a total loss of $2 million. 

Notably, the attacker transferred 443.8 ETH of the stolen funds to Tornado Cash. This move made tracing the transactions difficult and complicated fund recovery further. 

Critical Vulnerabilities in Token Design 

The NGP token attack exploited two main security flaws: 

• Purchase Limit Bypass: Using the “DEAD” address as the buyer allows bypassing the maximum purchase rule. 
• Price Manipulation During Sale: Contract synchronization during token sales reflects deducted fees, momentarily inflating the token price. 
• These vulnerabilities enabled the attacker to manipulate prices through large-volume transactions. 

Market Impact and Security Measures Post-Attack 

The hack highlights the importance of robust security measures in the DeFi ecosystem. Experts recommend strict control of purchase and sale limits in smart contracts and restricting the use of special addresses. Additionally, contract synchronization mechanisms should be secured against potential attacks. 

 You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post 2 Million Dollar Hack Hits BSC Token, Price Drops 88% appeared first on Coin Engineer.

Bruno Skvorc: “They Stole My Money”

Polygon DevRel Bruno Skvorc revealed that WLFI froze his tokens and refused to release them, citing his wallet as “high risk.” Sharing an email from the compliance team, Skvorc accused WLFI of outright theft.

“TLDR is, they stole my money,” Skvorc posted. “And because it’s the U.S. president’s family, I can’t do anything about it. This is the new age mafia.” He also claimed at least six other investors were subjected to similar 100% lockups.

Compliance Tools Under Fire

The incident drew criticism from on-chain investigator ZachXBT, who highlighted that compliance tools often wrongly flag addresses as risky — sometimes for trivial reasons like DeFi interactions.

You Might Be Interested In: Sonic SVM Research: Can New Stablecoins Shake Up the Old Order?

In Skvorc’s case, the flags were linked to past Tornado Cash usage, indirect ties to sanctioned entities like Garantex and Netex24, and activity with a blacklisted dashboard.

Justin Sun’s WLFI Tokens Frozen

The controversy deepened when Tron founder Justin Sun revealed that his WLFI tokens were also frozen after blockchain trackers flagged a $9 million transfer. Sun called the freeze “unreasonable” and said it violated blockchain’s core values, insisting tokens should be “sacred and inviolable.”

These developments raise fresh concerns over WLFI’s operations and may erode investor confidence in the Trump-linked project.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Developer Says Trump-Linked WLFI Stole His Money! appeared first on Coin Engineer.

Detention and Allegations Against the Ethereum Developer

Carrone stated that Turkey’s Minister of Internal Affairs accused him of “helping others misuse Ethereum.” He believes this is connected to a January 2022 research paper analyzing user privacy on Ethereum and Tornado Cash. “We never helped anyone engage in illegal activity; it was purely research on mixers and their properties,” he said.

Freedom Through Global Support

Carrone shared that early on, he thought things would go badly after being told his phone would be confiscated and he wouldn’t be able to speak to anyone. However, friends from the UAE, UK, US, Europe, Argentina, and even the Catholic Church stepped in, contacting senior Turkish officials to help secure his release. Members of the Solana ecosystem also offered assistance.

The older I get, the more I believe in the values of the West and religion. When I was younger, I was a naive hacker and anarchist who believed in cypherpunk ideals. I still do. But over time, I’ve come to see that many of the institutions and governments I once criticized are,… pic.twitter.com/CXYCKOXShg

— Fede’s intern (@fede_intern) August 11, 2025

Legal Process Still Ongoing

Carrone said he is currently in Europe but the case is still ongoing. His Turkish lawyer is working on his defense, and he noted, “If necessary, once things are clarified, I will return to clear my name.”

Ethereum Support for Storm’s Case

Following his experience, Carrone donated $500,000 worth of Ether to support the legal defense of Tornado Cash co-founder Roman Storm. “Roman’s defense is important because developers need to know they can push innovation forward and that the community will stand behind them,” he said.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Ethereum Developer Carrone Released After Detention in Turkey appeared first on Coin Engineer.

Why Was the Tornado Cash Case Filed?

The Tornado Cash case has emerged due to allegations that the decentralized crypto mixer platform, it, was involved in illegal activities such as money laundering and illicit fund transfers. It is a platform that anonymizes transactions on Ethereum and other blockchain networks, allowing users to hide their transactions. However, this anonymization feature has also been exploited by criminals for illicit purposes.

In 2022, the U.S. Department of the Treasury added Tornado Cash to its sanctions list, accusing it of violating anti-money laundering and terrorism financing laws after being used by criminals to launder illegal funds. Following this, Roman Storm, one of the founders of Tornado Cash, and other developers were sued for allegedly being involved in the platform’s management and potentially facilitating criminal activities.

This case has raised important questions about the legal responsibilities of software developers and platforms in the decentralized finance (DeFi) world. The case addresses key issues related to whether the development of the platform constitutes a crime and how the legal framework for software and decentralized systems will be shaped.

This article may also interest you: What is the Pump.Fun Platform? How to Use It?

Role of Dragonfly

Prosecutors claim that Dragonfly’s Telegram messages regarding it suggest the company had knowledge of the platform’s operations and potentially overlooked activities that could be considered criminal. However, Dragonfly argues that these communications were solely within the context of investor relations and did not constitute any criminal activity.

Legal Process

The case represents a critical turning point in terms of the responsibility of software developers and the legal framework of decentralized finance systems. The court’s decision could not only shape the future of Tornado Cash but also influence the legal status of the decentralized finance ecosystem.The Tornado Cash case has drawn attention as a case that challenges the legal boundaries of decentralized finance and the responsibilities of software developers. Dragonfly’s role in this process carries significance beyond investor relations and is of crucial importance for the future of decentralized finance.

Coinmuhendisi.com to access all the content and detailed news available, be sure to follow us on Google News!

The post The Role of Dragonfly Staff in the Tornado Cash Case! appeared first on Coin Engineer.

With $44 million stolen, the crypto world is once again reminded of its vulnerabilities.

Attack Originated from Internal Liquidity Account

According to CoinDCX CEO Sumit Gupta, the breach stemmed from an internal account used for liquidity provision with another exchange. Hackers drained $44 million through what Gupta described as a “sophisticated server breach.”

“No user funds were affected,” Gupta assured. “The compromised account was isolated swiftly, and the loss will be covered entirely by our treasury reserves.”

Funds Traced Across Chains

On-chain analyst ZachXBT traced the attacker’s wallet back to Tornado Cash, where it was funded with 1 Ethereum. The stolen funds were then partially bridged from Solana to Ethereum, making tracking difficult.

You Might Be Interested In: Sonic SVM Research: Can New Stablecoins Shake Up the Old Order?

The incident echoes a similar hack on WazirX—another Indian exchange—exactly one year ago to the day, which resulted in a $235 million loss. Analysts see the timing as a grim reminder of persistent cybersecurity gaps in the crypto sector.

Wave of Recent Crypto Exploits

• Nobitex (Iran): $100 million stolen on June 18; source code leaked.
• GMX V1: $40 million drained on July 9, later returned for a $5M bounty.
• Arcadia Finance: $3.5 million lost due to smart contract exploit.

These repeated breaches stress the urgent need for better risk management in both centralized and decentralized ecosystems.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post CoinDCX Suffers $44M Hack in Sophisticated Server Breach appeared first on Coin Engineer.

Which Addresses Were Removed?

According to the updated SDN list, the following Ethereum wallet addresses are no longer subject to sanctions:

• 0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc
• 0x47CE0C6eD5B0Ce3d3A51fdb1C52DC66a7c3c2936
• 0x910Cbd523D972eb0a6f4cAe4618aD62622b39DbF
• 0xA160cdAB225685dA1d56aa342Ad8841c3b53f291
• 0xD4B88Df4D29F5CedD6857912842cff3b20C8Cfa

Additionally, Tornado Cash’s official website has also been removed from the sanctions list. This decision has sparked widespread attention in the cryptocurrency industry and has been welcomed by many developers and investors alike.

What is Tornado Cash?

Tornado Cash is a decentralized privacy protocol operating on the Ethereum blockchain. It allows users to make anonymous transactions by obfuscating transaction details and breaking on-chain links between source and destination addresses. The protocol uses zk-SNARKs (Zero-Knowledge Succinct Non-Interactive Arguments of Knowledge) technology to guarantee privacy and anonymity.

You Might Be Interested In: Elon Musk Talks About the Name of a New Memecoin!

While Tornado Cash was initially designed for privacy protection, it was also exploited for illicit purposes, including money laundering activities allegedly linked to North Korean hacker groups such as Lazarus. In 2022, the U.S. Treasury Department sanctioned Tornado Cash for providing a platform that facilitated these illegal transactions.

What is OFAC?

OFAC (Office of Foreign Assets Control) is an agency under the U.S. Department of the Treasury. Its role is to enforce economic and trade sanctions in support of U.S. national security and foreign policy objectives. OFAC targets terrorists, drug traffickers, cyber threats, and individuals involved in illicit financial activities through its sanctions programs.

In 2022, OFAC designated Tornado Cash on its sanctions list, effectively banning U.S. persons from interacting with the protocol. However, this latest update shows a degree of flexibility in regulatory approaches, as certain addresses and the website have now been delisted.

Potential Impact on the Crypto Ecosystem

The partial lifting of sanctions on Tornado Cash addresses may set a precedent for other privacy-oriented projects. However, it’s important to note that this is not a complete removal of sanctions, but rather a specific delisting of selected wallet addresses and the website. Regulatory agencies continue to evolve their approaches to cryptocurrency projects, offering both new opportunities and risks for the industry.

This development is seen as a positive step by many in the blockchain space, potentially signaling a shift toward more nuanced regulation of privacy protocols.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Tornado Cash Addresses Removed from OFAC Sanctions List! appeared first on Coin Engineer.

Ethereum Foundation Forms External Advisory Group to Uphold Core Values

The Ethereum Foundation (EF), the nonprofit organization supporting the Ethereum ecosystem, announced the creation of an external advisory group dedicated to preserving the blockchain network’s core values.

On February 28, the foundation introduced the “Silviculture Society,” a collection of individuals from outside the EF. The group will provide informal counsel to the EF and tend to the “forests in the infinite garden of Ethereum,” as the foundation described.

The nonprofit stated that the group will work to ensure Ethereum sustains its core values, including open source, privacy, security, and censorship resistance. The EF emphasized that the network’s success relies on developers committed to building with these values in mind.

The EF tagged 15 individuals who are part of the council, including researchers, developers, and project founders.

Vitalik Buterin Criticizes Crypto Industry’s Shift Toward Gambling

The formation of the external advisory group follows Ethereum co-founder Vitalik Buterin’s recent criticism of the crypto industry’s moral shift towards gambling.

On February 20, Buterin shared his frustrations about the industry, stating that one of his disappointments was the backlash Ethereum received for not embracing blockchain-based casinos.

Buterin explained that Ethereum was being labeled as “bad and intolerant” for not respecting “casinos,” while other chains were seen as better because they did. He further mentioned that if the community reversed its values, he would not be interested in participating in the space.

However, Buterin reassured that when he spoke with community members offline, the sentiments were different, giving him confidence that the values of the space remain intact.

Ethereum Foundation Donates $1.25 Million to Tornado Cash Developer

Upholding its open source values, the Ethereum Foundation (EF) made a donation of over $1 million to support the legal defense of Tornado Cash developer Alexey Pertsev. On February 26, the EF stated that privacy is normal and writing code is not a crime.

Pertsev responded to the organization, expressing gratitude for the substantial donation toward his defense. The developer said he is focused on preparing his appeal and that the donation “means the world” to him.

You can freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram  ,YouTube and Twitter channels for the latest news and updates.

The post Ethereum Foundation Establishes Advisory Board to Uphold Blockchain Values appeared first on Coin Engineer.

Infini Lost $50 Million in Exploit

Stablecoin payment firm Infini is facing allegations of losing $50 million due to an exploit carried out by a developer who retained admin rights after project delivery.

According to security firm Cyvers, the perpetrator, who worked on the Infini project for contract development, allegedly kept their admin privileges after the project was completed.

The attacker funded the wallet used in the exploit with 1 Ether from the Tornado Cash crypto mixer. They then transferred $49.52 million worth of USD Coin from Infini through a contract created in November 2024.

The USD Coin was immediately swapped for Dai, a stablecoin with no freeze function. The funds were then converted to 17,696 ETH and moved to a secondary address at the time of writing.

Infini did not halt withdrawals, and founder Christian Li stated in an X post that full compensation would be provided in a worst-case scenario. Li also mentioned that the platform had observed $500,000 in withdrawals since the theft.

In a now-deleted tweet, Infini team member “Christine” claimed that the engineer responsible for the theft had been identified and reported to the authorities.

Infini Exploit Follows the Largest Hack in History

The attack on Infini follows a record-breaking hack on cryptocurrency exchange Bybit on February 21, where $1.4 billion worth of Ether and related tokens were lost.

The large-scale attack sparked fears of potential insolvency. However, Bybit chose to keep withdrawals open and pledged to cover the loss if the funds couldn’t be recovered.

Bybit relied on loans from rival exchanges and partners to meet the immediate liquidity demands of customer withdrawals, which totaled over $5 billion, according to DefiLlama data.

On February 24, Bybit CEO Ben Zhou announced that the exchange had fully closed its Ether gap.

Onchain detective ZachXBT identified North Korea’s state-sponsored hacking group Lazarus as the prime suspect in the attack on Bybit. ZachXBT linked the Bybit hacker’s wallet to an attack on Phemex in January and to a BingX attack, both attributed to North Korea.

You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don’t forget to follow us on our Telegram, YouTube, and Twitter channels for the latest news and updates.

The post Infini Suffers $50 Million Attack appeared first on Coin Engineer.