Hackers hacked the front end of the KyberSwap DeFi project Kyber Network’s unattended exchange. Damage to users amounted to 265,000 USDC.

1/ KyberSwap Front End Exploitation Notice:

We detected and neutralized an exploit in the KyberSwap frontend. Affected users will be compensated. We have summarized the details in this title

— Kyber Network (@KyberNetwork) September 1, 2022

On September 1, KyberSwap developers detected suspicious activity at the front-end level. After shutting down the interface for investigation, they found malicious code in the tool Google Tag Manager (GTM).

The exploit placed a false confirmation for the transaction and allowed hackers to withdraw the user’s funds to their address.

The team relaunched the interface in less than two hours, removing the malicious code from GTM.

The attack affected two addresses. The developers assured that the victims will receive full compensation. According to them, the attackers were targeting the whales’ wallets.

The KyberSwap team identified hacker addresses on the Ethereum and Polygon networks and contacted various exchanges to monitor and block the movement of stolen assets.

According to PeckShield, the attackers withdrew the first tools for the attack from the central BitMart platform.

#PeckShieldWarning @KyberNetwork suffered a frontend exploit, ~265k $amUSDC Taken from 0x20fc…dc. He revoked his approval.
Stolen funds are currently predominantly located at 0xfd6F29…65.
PeckShield found that the initial funds of the exploit were withdrawn. @BitMartExchange https://t.co/YnsKnafoUw pic.twitter.com/BkTzQgnWiO

— PeckShieldAlert (@PeckShieldAlert) September 2, 2022

KyberSwap offered the hackers to contact them and return the stolen funds for a reward of 15% of the amount.

According to Dune Analytics, the platform ranks 18th in the DEX in terms of weekly trading volume with $2.57 million, while leader Uniswap has $8.8 billion.

Recall that in August the FBI issued a warning about the most common vulnerabilities used by cybercriminals to attack DeFi platforms.

Read ForkLog bitcoin news in our Telegram – cryptocurrency news, courses and analysis.