Underwater: Ankr Hacked for $5.5M

Ankr is a decentralized web3 infrastructure provider. They have an excellent public RPC service, which I have used myself, and a liquid staking service on several chains. They have also been hacked. On Dec 1st, in an apparent compromise of their deployer key, Ankr was hacked on Binance Smart Chain, losing over $5.5M USD.

The attacker gained access to the Ankr deployer key. Earlier in the day, Ankr performed several maintenance operations related to its tokenomics. Everything seemed in order. It is unknown at this time whether the deployer key leaked during those operations, or whether the attack was planned to coincide with this time.

The affected aBNBc token is an upgradeable token. That means that the admin can change the code at any time. This is exactly what he did, first deploying a malicious attack contract, then changing the token to use the attack code. One transaction later, he was the proud owner of 10 quadrillion aBNBc, which he promptly dumped.

Over the next 30 minutes, the attacker bridged his ill-gotten gains to Ethereum and Polygon. Some $170k remains on Binance Smart Chain, both in the exploiter address, and Tornado Cash.

Ethereum
Polygon

Ankr is aware of the incident and is working to do damage control. Hopefully we will see a full post-mortem in the next days.

The root cause of this attack lies in their loss of the governance key, but really, that key shouldn’t have been the single point of failure anyway. Multisignature wallets or timelocks are industry standard at this point for a reason. Sure, they’re slightly more complex to use – but changing upgradeable contracts is a complex business anyway. Any team that can manage that, can do it through a multisig. It’s not THAT hard.

Stay safe out there, anon.

Photo of author

Written By BowTiedPickle

Anonymous cartoon pickle inspired by BowTiedBull. Degen chemical engineer, moonlighting as a Solidity developer.

Disclosure

This article may contain links to third-party websites or other content for information purposes. BowTiedIsland may receive a commission at no cost to you if you purchase a product after clicking one of these links. The Third-Party Sites are not under the control of BowTiedIsland, and BowTiedIsland is not responsible for the content of any Third-Party Site. All information contained herein is the opinion of the writer and does not constitute financial advice. We aim to act as a neutral third party and aid in your research and analysis.


The Jungle


Crypto, Investing, and E-Commerce with BowTied Bull

The future is internet based, therefore we have a triangle based approach with crypto, e-commerce business making and Investing in traditional assets

The Culture War with BowTiedRanger

Whether you’re a political junkie or just interested in current events. 

You’ve come to the right place for analysis of the most relevant current events and political issues.

Fitness With BowTiedOx

BowTiedOx provides you a place to find all of his latest programs and guides.

Weekly newsletters that cover fitness, health, and mindset, all grounded in the fundamentals of physiology.

Media Production with BowTied Turkey and BowTied Tamarin

Video is no longer optional.

Don’t get left behind.

Your brand deserves professional videos to engage your audience.

Art & Graphic Design with BowTied Patriot

BowTied Patriot is a graphic artist who specializes in photography, mixed medium custom artwork, and NFT creation.

Join BowTiedPatriot as he dives into making Art in Web3.0 and The Metaverse.

Cooking with BowTiedOctopod

Learn secrets from a fine dining chef for maximum flavor and time-saving efficiency

Newsletters on Ingredients, Techniques and Flavor hacks that will have you eating better. We will never eat bugs!

Meme Warfare with DgenFren

Increase your online engagement, organically influence narratives, and build your online persona by using marketing that your target audience actually wants: memes.

Learn How to Sell with BowTiedSalesGuy

Sales is one of the most transferrable life skills, yet few know how to actually sell.

Traditional sales tactics don’t cut it in today’s hyper competitive world.

Learn the secrets from a Chad Salesman and change your Life forever.

Ecommerce with BowTiedOpossum

Learn the skills to start and build your first online business.

Want to build a business that travels with you?

Learn from an industry veteran that has worked on and with brands you already know.