{"id":22414,"date":"2024-06-10T13:00:23","date_gmt":"2024-06-10T10:00:23","guid":{"rendered":"https:\/\/coinengineer.io\/?p=22414"},"modified":"2024-06-10T09:19:13","modified_gmt":"2024-06-10T06:19:13","slug":"ethereum-loopring-hacked-guardian-system-breached","status":"publish","type":"post","link":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/","title":{"rendered":"Ethereum’s Loopring Hacked, Guardian System Breached"},"content":{"rendered":"

Originally revealed on Sunday, Loopring<\/strong>, the zkEVM protocol<\/a> developed on Ethereum with a website billing its smart wallet application as “Ethereum’s most secure wallet,” suffered a security compromise connected to its “Guardian” two-factor authentication system.<\/p>\n

Users of the Guardian service can choose to designate wallets of trustworthy people or businesses to help with security activities such as lock-in of a compromised wallet or restoration of one should the seed phrase disappear. Loopring<\/strong> revealed in its release that a hacker broke through company’s own Official Guardian system to start recovery on wallets using that one guardian without the users’ authorization. According to company’s website<\/a>, wallets that used multiple guardians or another third-party guardian were shielded from the vulnerability, as more than 50% of guardians are required to start transactions.<\/p>\n

Loopring’s 2FA Compromised, $5M Stolen<\/h2>\n

Loopring<\/strong> also revealed two wallet addresses identified by the protocol allegedly engaged in the security violation. Blockchain records reveal one wallet was able to empty the impacted wallets of around $5 million worth of tokens.<\/p>\n

It Might Interest You: Arbitrum\u2019s $215M Gaming Catalyst Program Approved<\/a><\/em><\/span><\/p>\n

“We are working closely with Mist security professionals to ascertain the source of the compromise of our 2FA system. We have momentarily stopped Guardian-related and 2FA-related activities in order to safeguard our users. After this action, the compromise stopped,” t<\/em>he protocol said in its X statement<\/a>. The block couldn’t loop right away for comments.<\/p>\n

Loopring<\/strong> has asked that anyone with further knowledge about the attack forward it to the protocol and mentioned that it’s working with law enforcement to track the offender.<\/p>\n

Although the attack probably caught the team off guard, Loopring’s<\/strong> risk disclosure statement points to a breach of its Guardian system as a possible attack path and advises users to find at least three guardians. “We will automatically add the Loopring<\/strong> Official Guardian service to your wallet after it is generated. Loopring<\/strong> Official Guardian is a centralized service, so hackers could target and control it.”<\/em>\u00a0company’s\u00a0website says.<\/p>\n","protected":false},"excerpt":{"rendered":"

Originally revealed on Sunday, Loopring, the zkEVM protocol developed on Ethereum with a website billing its smart wallet application as “Ethereum’s most secure wallet,” suffered a security compromise connected to its “Guardian” two-factor authentication system. Users of the Guardian service can choose to designate wallets of trustworthy people or businesses to help with security activities<\/p>\n","protected":false},"author":6,"featured_media":22417,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,2],"tags":[105,6747,6706],"class_list":["post-22414","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto-news","category-news","tag-ethereum","tag-guardian","tag-loopring"],"yoast_head":"\nEthereum's Loopring Hacked, Guardian System Breached - Coin Engineer<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ethereum's Loopring Hacked, Guardian System Breached - Coin Engineer\" \/>\n<meta property=\"og:description\" content=\"Originally revealed on Sunday, Loopring, the zkEVM protocol developed on Ethereum with a website billing its smart wallet application as “Ethereum’s most secure wallet,” suffered a security compromise connected to its “Guardian” two-factor authentication system. Users of the Guardian service can choose to designate wallets of trustworthy people or businesses to help with security activities\" \/>\n<meta property=\"og:url\" content=\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/\" \/>\n<meta property=\"og:site_name\" content=\"Coin Engineer\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-10T10:00:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-06-10T06:19:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1079\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Tanju Akb\u0131y\u0131k\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tanju Akb\u0131y\u0131k\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/\",\"url\":\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/\",\"name\":\"Ethereum's Loopring Hacked, Guardian System Breached - Coin Engineer\",\"isPartOf\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png\",\"datePublished\":\"2024-06-10T10:00:23+00:00\",\"dateModified\":\"2024-06-10T06:19:13+00:00\",\"author\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546\"},\"breadcrumb\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#primaryimage\",\"url\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png\",\"contentUrl\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png\",\"width\":1920,\"height\":1079,\"caption\":\"Loopring\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/coinengineer.net\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ethereum’s Loopring Hacked, Guardian System Breached\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#website\",\"url\":\"https:\/\/coinengineer.net\/blog\/\",\"name\":\"Coin Engineer\",\"description\":\"Btc, Coins, Pre-Sale, DeFi, NFT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/coinengineer.net\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546\",\"name\":\"Tanju Akb\u0131y\u0131k\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g\",\"caption\":\"Tanju Akb\u0131y\u0131k\"},\"url\":\"https:\/\/coinengineer.net\/blog\/author\/cetanju\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ethereum's Loopring Hacked, Guardian System Breached - Coin Engineer","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/","og_locale":"en_US","og_type":"article","og_title":"Ethereum's Loopring Hacked, Guardian System Breached - Coin Engineer","og_description":"Originally revealed on Sunday, Loopring, the zkEVM protocol developed on Ethereum with a website billing its smart wallet application as “Ethereum’s most secure wallet,” suffered a security compromise connected to its “Guardian” two-factor authentication system. Users of the Guardian service can choose to designate wallets of trustworthy people or businesses to help with security activities","og_url":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/","og_site_name":"Coin Engineer","article_published_time":"2024-06-10T10:00:23+00:00","article_modified_time":"2024-06-10T06:19:13+00:00","og_image":[{"width":1920,"height":1079,"url":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png","type":"image\/png"}],"author":"Tanju Akb\u0131y\u0131k","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Tanju Akb\u0131y\u0131k","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/","url":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/","name":"Ethereum's Loopring Hacked, Guardian System Breached - Coin Engineer","isPartOf":{"@id":"https:\/\/coinengineer.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#primaryimage"},"image":{"@id":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#primaryimage"},"thumbnailUrl":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png","datePublished":"2024-06-10T10:00:23+00:00","dateModified":"2024-06-10T06:19:13+00:00","author":{"@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546"},"breadcrumb":{"@id":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#primaryimage","url":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png","contentUrl":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/06\/2256.png","width":1920,"height":1079,"caption":"Loopring"},{"@type":"BreadcrumbList","@id":"https:\/\/coinengineer.net\/blog\/ethereum-loopring-hacked-guardian-system-breached\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/coinengineer.net\/blog\/"},{"@type":"ListItem","position":2,"name":"Ethereum’s Loopring Hacked, Guardian System Breached"}]},{"@type":"WebSite","@id":"https:\/\/coinengineer.net\/blog\/#website","url":"https:\/\/coinengineer.net\/blog\/","name":"Coin Engineer","description":"Btc, Coins, Pre-Sale, DeFi, NFT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/coinengineer.net\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/286f3a00b45c1661961e40ff0a1c7546","name":"Tanju Akb\u0131y\u0131k","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a027c5acae1ab2c3649244f87d705ac7ee359dd7e3222b84cb1d32ba3a8d2e18?s=96&d=mm&r=g","caption":"Tanju Akb\u0131y\u0131k"},"url":"https:\/\/coinengineer.net\/blog\/author\/cetanju\/"}]}},"_links":{"self":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/22414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/comments?post=22414"}],"version-history":[{"count":4,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/22414\/revisions"}],"predecessor-version":[{"id":22424,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/22414\/revisions\/22424"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/media\/22417"}],"wp:attachment":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/media?parent=22414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/categories?post=22414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/tags?post=22414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}