Thread by @KyberNetwork

1/ ❗️Notice of Exploit of KyberSwap Frontend:

We identified and neutralized an exploit on the KyberSwap frontend. Affected users will be compensated. We have summarized the details in this thread⬇️

2/ At 3.24pm GMT+7 we identified a suspicious element on our frontend. Shutting down our frontend to conduct investigations, we identified a malicious code in our Google Tag Manager (GTM) and immediately disabled it.

3/ We have compiled a complete list of confirmed, and suspected, attacker addresses used during this period, including tracking interactions with centralized exchanges and @opensea.

4/ USD$265K of user funds were lost, with 2 affected addresses, and users will be compensated. It appears the attacker was targeting whale wallets.

5/ Could more people be affected? No, we have effectively neutralized the attack and it is safe to use all #KyberSwap functions including #swap aggregator, adding #liquidity, and #farming. However, we urge all users to continue exercising caution.

6/ If you suspect or find that your address has interacted with the malicious script or has been given wrongful approval, we have provided instructions to revoke the approval in our blog post bit.ly/3wQMAg9

7/ We strongly urge all #DeFi projects to conduct a thorough check on your frontend code & associated Google Tag Manager (GTM) scripts as the attacker may have targeted multiple sites. Let's work together as one #DeFi community to defend against these malicious attacks

8/ Message to the attacker: We know your addresses and interactions. Centralized exchanges have also been informed. You’ll not be able to cash out without revealing yourself. As a bug bounty, we’re offering you 15% of the funds if you return them.

9/ Read the full announcement here bit.ly/3wQMAg9 and join our #Kyber discord if you have more questions discord.gg/tbBm29wxXt

10/
@binance @Gemini @coinbase @kucoincom @FTX_Official @okx @gate_io @HuobiGlobal @krakenfx @bitfinex @cryptocom @MEXC_Global @upbitglobal

@krakenfx, @jespow, @pete_rizzo_, @c7five

We're heartened by the support and flow of help from all directions. The team is reviewing all messages & feedback, and will respond where necessary and possible. Thank you 🙏

Appreciate the help of industry partners like @cz_binance
@binance, and so many more, during this time. We will only get stronger from this.

https://twitter.com/cz_binance/status/1565976776710430721?t=lqagqry0SG9lHC8eoeMYWw&s=19