Hackers stole more than $12 million worth of cryptocurrency from the decentralized finance (DeFi) platform Cork Protocol this past week. Company co-founder Phil Fogel said all activity on the platform has been paused. “There was a security incident affecting the wstETH:weETH market at 11:23 UTC today. All other Cork markets have been paused as a precaution, and no other markets have been impacted,” the company later said in a statement. “We are actively investigating the situation and will continue to provide updates as more details become available. Thank you to our partners as we work through this.”
Cork Protocol did not respond to requests for comments about how much was stolen or how the attack was conducted. Multiple blockchain security firms pointed to data showing 4,530 ETH was stolen in the attack, which was worth about $12.1 million at the time.[1]
Cork Protocol is a decentralized finance (DeFi) platform focused on providing cryptocurrency solutions comparable to traditional finance tools such as credit default swaps. Cork Protocol has previously gained recognition, participating in Andreessen Horowitz’s Crypto Startup Accelerator, where it secured venture capital funding. This latest attack adds to a growing trend of crypto thefts, highlighting vulnerabilities within the sector.
Cork Protocol is based in Delaware and says it is “designed for anyone looking to hedge, price, and trade depeg risk in DeFi.” The term “depeg” refers to an instance where a cryptocurrency pegged to an asset, like a stablecoin tied to the dollar, deviates from its intended value due to market volatility, liquidity issues or external shocks, similar to what was seen during the collapse of Silicon Valley Bank in 2023. The company compares its product to traditional finance tools like credit default swaps, noting that DeFi “lacks an equivalent.”
The attack came just five days after $223 million was stolen from the Cetus decentralized cryptocurrency exchange. More than $1.4 billion was stolen from the Bybit platform earlier this year.
Security firm PeckShield reported that crypto platforms saw more than $3 billion in losses throughout 2024, reflecting a 15% increase in crypto thefts compared to 2023.
This article is shared at no charge for educational and informational purposes only.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. We provide indicators of compromise information via a notification service (RedXray) or an analysis service (CTAC). For questions, comments or assistance, please contact the office directly at 1-844-492-7225, or feedback@redskyalliance.com
Weekly Cyber Intelligence Briefings:
- Reporting: https://www.redskyalliance.org/
- Website: https://www.redskyalliance.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://register.gotowebinar.com/register/5207428251321676122
[1] https://therecord.media/cork-protocol-defi-12million-crypto-theft/
Comments