No one noticed when hackers stole almost a half-billion dollars in crypto currencies.

That’s the crazy conclusion from the Ronin team’s announcement Tuesday morning that 173,600 ether and 25.5 million USDC stable coins were taken from their network starting March 23. Ronin is an Ethereum sidechain designed for the popular blockchain-integrated game Axie Infinity.

This theft, valued at $615 million, is one of the greatest DeFi losses to date, surpassing the $600 million in crypto stolen in August 2021 by the Poly Network breach.

To make matters worse, according to the official Ronin Network blog post, the lost funds were discovered by a user who was unable to withdraw their own ether.The bridge contract’s ETH and USDC deposits have been drained, according to Tuesday’s blog post. “At this time, Ronin Network users are unable to withdraw or deposit cash.”

Axie Infinity is a popular pay-to-play game in the Philippines, in which players pay real money to gain access to the game in the hopes of collecting tokens that can be exchanged for cash.

Unlike earlier DeFi disasters, the Ronin hack does not appear to be a smart contract vulnerability, indicating that there wasn’t necessarily a defect in the system. Rather, the thieves took a more traditional way, stealing the cryptographic keys from Axie Infinity developer Sky Mavis and “an Axie DAO third-party validator.”

“In order to fabricate false withdrawals, the attacker used hacked private keys,” Ronin explains.

To trace the funds, Ronin claims it’s cooperating with law enforcement and the blockchain analytics firm Chainalysis. As with other public blockchains, such as Bitcoin, it is feasible to see where the stolen funds are as of this writing.

While part of the boosted ether and USDC are on the move, Ronin points out that the majority of the boosted ether and USDC is held in two wallets owned by the hacker or hackers. Some monies have already been sent once more. The initial transfers in question on March 23 are documented in those wallets.

Perhaps a half-billion dollar attack wasn’t enough to set off any internal alarm bells in the exploit-prone world of DeFi. Either that, or the so-called future of finance lacks sufficient alarm bells to sound the alarm.

The post Half-Billion Dollar DeFi Hack Unnoticed for Almost a Week appeared first on Techlist.

On Thursday, hackers broke into Electronic Arts’ servers and stole key game files for popular games including FIFA 21.

According to reports, these data are now sold on the dark web. The server includes FIFA 21 source code and its matching server code. The news media said it also snatched away: the source code of Frostbite, the engine that powers popular EA games such as “Battlefield”.

EA confirmed the hacking attack and pointed out that this is not a ransomware attack, and there is no personal data or info in the breached files. They are investigating a recent intrusion on their network, in which a small amount of game source code and related tools were stolen.

EA spokesperson said, “The player data has not been accessed, and there is no reason to believe that there is any risk to player privacy. After the incident, EA has made security improvements and it is not expected to have an impact on their games or business.”

As part of the ongoing criminal investigation, they are actively cooperating with law enforcement officials and other experts.

It is reported that the hackers first purchased a stolen cookie that allowed them to access the Slack channel used by the company, thereby disrupting EA’s network. From there, they sent a message to IT support and gained access to the EA company A multi-factor authentication token for the network.

This hacking attack occurred before this year’s E3 Game Conference, which is scheduled to start on June 12.

The post EA hacked: Hackers steal 780 GB of data, including FIFA 21 secrets appeared first on Techlist.

On Internet security vulnerability is a weakness which allows attackers to control the system information. Attackers find the system flaws and take control over the system. Web browsers are only medium for surfing websites and they are essential part of Internet. Generally most of the users visit the websites through Google Chrome and Mozilla Firefox.

Recently, A young Pakistani hacker Rafay Baloch found a flaw in world most popular browsers, Google Chrome and Mozilla Firefox. Rafay is good bug hunter. He discovered a bug that could allow attackers to  use address bar and divert users to the malicious and harmful websites, and can steal the sensitive information of the users.

Google security team also state that “We recognize that the address bar is the only reliable security indicator in modern browsers and if this could be controlled by an attacker it could be harmful.

Also Rafay baloch wrote on his blog (Rafay Hacking Articles), This feature can possibly be exploited by attackers y simply put natural characters like “/” or “!” towards the end of a URL that turn it and gives the false impression that the user is visiting an official site.

For example, a website which has logical order  127.0.0.1/!/http://facebook.com will be displayed as http://facebook.com/!/127.0.0.1. This gives false impression that the user is visiting official Facebook.com while being shown data from 127.0.0.1. “The IP address can be easily hidden in the URL specially on mobile browsers  by selecting a long URL in order to make the attack look like realistic and making users fool.

Rafy Baloch wrote, “In order to make the attack more realistic, a Unicode versions of padlock can be used in order to display the presence of SSL.” Further he said, 70% of the direct traffic is affected by this bug which he found in Google chrome and Firefox.

Rafay Baloch living in Karachi and is an Hacker, Researcher and Author. He already discover command execution vulnerabilities on sub domain of PayPal in 2012. And PayPal awarded him $10,000 USD under their Bug Bounty program.  Paypal have mentioned Rafay Baloch name on their Honorable Mention page to appreciate all efforts and contributions to Bug Bounty Program.

About Rafay Baloch

Rafay Baloch from Hyderabad, working at PTCL (ETISALAT) as a Manager Information Security. He is providing Consultancies for International Organizations. He got Primary and Secondary education from Bahria Foundation and PECHS Schools Karachi. Graduation in Computer Science with first position from Bahria University. He is one of the leading information security experts and evangelist in Pakistan. He is listed as Top 25 threat seekers of 2014 by SC-magazine for the issues he uncovered with Android. And top 5 Ethical hackers of 2014 according checkmarkx.

The post A Young Pakistani Hacker Wins $5000 For Finding Bug In Browsers appeared first on Techlist.