Weekly Report (Nov-20)



  • Over $35.19 million was lost in multiple DeFi hacks.
  • Animoca Brands joined forces with Chiliz Chain as a key validator.
  • PSG and Blvck Paris unveil exclusive NFT collection on Crypto.com marketplace.
  • G2A launched a new NFT marketplace focused on Web3 gaming.
  • Disney partnered with Dapper Labs to launch a new NFT marketplace on the Flow blockchain.

Blockchain Hacks

Kronos Research, a Taipei-based trading and market-making firm, issued a community alert stating that they experienced unauthorized access to some of their API keys. According to reports, over 12,800 ETH, worth approximately $26 million, were reportedly stolen. The team promptly paused all trading activities to further assess the damage and mitigate all unforseen risks.

dYdX was the target of a coordinated attack, which led to significant market manipulation across the yearn finance markets, culminating in a loss of assets valued at approximately $9 million. As a result, the open interest in YFI on dYdX dramatically surged from $0.8 million to $67 million. They utilized their v3 insurance fund, containing about $23.5 million, to cover the losses incurred during the liquidations in the YFI market. In response, the team also raised the initial margin requirements for their less liquid markets, including 1Inch, SUSHI, AAVE, and others. The team also announced their intention to reward those instrumental in the investigation with bounties of an undisclosed amount, while stating their disinterest in negotiating with the perpetrator.

The ICO project of SHIBA was exploited on the BNB chain due to a smart contract vulnerability, which resulted in a loss of 101.7 BNB, worth approximately $25,745. The root cause of the exploit is an improper lock mechanism. The attacker initially purchased 507.7 million locked SHIBA tokens with 20 BNB. The attacker transferred these locked tokens to PancakePair by exploiting a vulnerable function of the contract, enabling them to bypass the specified lock period. The exploiter immediately swapped out WBNB from the PancakePair and retained the extra amount as profit.

Trader Joe, a decentralized exchange, was exploited due to a vulnerability in its front-end interface caused by a malicious third-party analytics plugin. The extent of the loss resulting from the exploit remains unknown. The attacker likely controlled the malicious contract that routed the swaps on the front end. Reports reveal that this contract setup affected approximately 100 users on the Ethereum Mainnet, BNB Chain, Avalanche, and Arbitrum networks. After the breach, the team advised users who had interacted with the DEX to revoke any access granted to this contract. Following an investigation and remediation efforts, the team restored its frontend, assuring users that it is safe for all activities, including trading, liquidity provision, staking, and lending.

The BABYFIDO token on the Ethereum Mainnet is believed to be involved in a rug-pull scheme. The deployer of the token exchanged roughly twenty-two hundred trillion BABYFIDO tokens for 39.4 WETH, equivalent to about $81,400. Subsequently, the value of BABYFIDO plummeted by 100% in the wake of this maneuver.

The Builders NFT on the BNB chain is suspected of being a rug pull. The token’s deployer traded around one thousand trillion BuiLDerS tokens for 369.2 BNB, valued at nearly $90,000. Following this incident, the value of the BuiLDerS token also experienced a dramatic drop of approximately 100%.

Metaverse, and NFTs

Animoca Brands has become a new validator and a leading participant on the Chiliz chain, merging its blockchain expertise with Chiliz’s SportFi efforts. This collaboration aims to enhance fan involvement and create monetization opportunities in the sports industry. As validators, they are pivotal in maintaining the network’s integrity and governance. Their role includes approving and facilitating the issuance of fan tokens, NFTs, and decentralized apps, as well as authenticating transactions on the Chiliz Chain and safeguarding the execution of smart contracts.

Paris Saint-Germain, the renowned French football club, and Blvck Paris, a cutting-edge fashion label, are joining forces for an exclusive venture that blends sports, fashion, and digital creativity. This unique collection features physical clothing items, but it’s primarily led by a digital fashion release through NFTs, debuting on the Crypto.com marketplace. These NFTs, created on the Cronos blockchain, grant early buyers the opportunity to acquire the physical apparel and offer additional perks to their owners. With a total of 1,000 NFTs priced at $50 each, Crypto.com highlights that 10% are unique edition NFTs, exchangeable for a box containing physical products from the collaboration. The collaboration has previewed several items adhering to Blvck Paris’s signature monochromatic style, such as an all-black hoodie and a soccer ball, both featuring white text.

G2A, a renowned digital gaming retailer, recently launched their NFT marketplace, dubbed G2A Geekverse, with a specific focus on Web3 and NFT games. This addition of gaming NFTs to their existing range of gaming products marks a significant foray for G2A into blockchain-based gaming. The primary objective of this initiative is to introduce gamers to the world of blockchain gaming and to showcase NFTs from select games in partnership with G2A. Essentially, the digital hub aims to offer insights on prominent Web3 games and provide Web3 gaming enthusiasts with the chance to buy or sell digital assets linked to these games.

Disney has unveiled a new series of digital collectibles, created and released by Dapper Labs, accessible via the NFT platform named Disney Pinnacle. Mirroring the popular physical pins sold at Disney theme parks, which enthusiasts avidly collect and trade, Disney Pinnacle introduces a digital version of these collectibles, minted as NFTs on the Flow blockchain. This platform allows users to amass and exchange digital pins that depict characters from Disney and Pixar, including iconic figures like Mickey Mouse, Sebastian from The Little Mermaid, and Woody from Toy Story. Enthusiasts can purchase individual digital tokens directly through the app, acquire randomized token packs, or engage in buying and selling tokens with other users. Additionally, the platform offers opportunities to win complimentary pins through participation in contests, promotional events, and certain activities.

OnChain Insurance Industry News

Neptune Mutual announced a premium November promotion offer for the AAVE community. Users purchasing AAVE V2 and AAVE V3 covers will receive an exclusive 25% cashback on the policy fee.

Bumper Finance announced that the team will be migrating their protocol to Arbitrum.