Preemptive prevention of security, fraud, and compliance threats in Web3. Trusted byBinance, Cryptocom, Ledger, Uphold & more. ๐Ÿ“ง [email protected] | ๎จ€ @Cyvers_

Joined March 2023
๐ŸšจALERT๐ŸšจHey @WazirXIndia, Our system has detected multiple suspicious transactions involving your Safe Multisig wallet on the #ETH network. A total of $234.9M of your funds have been moved to a new address. Each transaction's caller is funded by @TornadoCash. The suspicious address has already swapped $PEPE, $GALA, and $USDT to $ETH and continues to swap other digital assets. We attempted to contact you 30 minutes ago, but received no response. It appears that your Safe wallet has been compromised by a malicious actor! Want to keep your company off our alerts radar? Learn how to secure your assets: Book a Demo ๐Ÿš€ calendly.com/d/cpx9-yvd-vpp/โ€ฆ #CyversAlert
160
237
209
1,226
617,548
๐ŸšจALERT๐ŸšจOur system has detected an address poisoning attack resulting in a $100k solana:Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB The scammer initially poisoned the victimโ€™s wallet around 66 days ago, and today, the victim unknowingly sent funds to the scammerโ€™s address. To evade potential freezing, the scammer has already swapped the solana:Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB to $ETH and holds 52.8 $ETH. Stay Safe: ๐Ÿ‘‰Always double-check the full wallet address before sending funds. Enable AI-powered security tools to detect suspicious transactions and protect your users. Our system is continuously monitoring and preventing such attacks. Want to secure your assets and prevent future attacks? Book a Demo today! calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
7
13
1
72
26,485
We're excited to share our new partnership with @sumsub , bringing Cyvers' real-time AI-powered threat detection capabilities into Sumsub's compliance platform. By combining advanced blockchain threat intelligence with compliance workflows, the partnership enables crypto businesses to detect malicious wallets, scams, hacks, and other on-chain threats before they become incidents helping strengthen both compliance , fraud and security. Read the full announcement here: sumsub.com/newsroom/sumsub-pโ€ฆ
2
4
12
22,286
๐ŸšจALERT๐ŸšจOur system has detected a suspicious transaction involving the @VerusCoin Ethereum Bridge with an estimated loss of $7.54M. The attacker exploited the bridge's import mechanism and drained $ETH, $MKR, $tBTC, $EURC, $USDT, $MKR, $USDC and $scrvUSD from the bridge reserves. All stolen funds swapped to native $eth and being deposited into @TornadoCash If you wish to safeguard yourself against such incidents, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
1
4
1
5
23,665
๐ŸšจALERT๐ŸšจOur system has detected a suspicious transaction involving @AFX_XYZ, resulting in a loss of 24.1M ethereum:0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 on the #Arbitrum network. Root cause: suspected compromise of validator keys. The attacker bridged the stolen ethereum:0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 to the #Ethereum network, swapped the entire amount for ETH, and the funds are currently held in an attacker controlled wallet. If you wish to safeguard yourself against such incidents, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
AFX is aware of an incident involving the AFX-operated USDC custody bridge on Arbitrum. Upon detecting the incident, we immediately suspended bridge operations and initiated our incident response procedures. Our engineering and security teams are actively investigating the root cause in collaboration with leading blockchain security partners. Based on our current assessment, the incident appears to be isolated to the AFX-operated custody bridge. The AFX trading infrastructure, mainnet, and the Arbitrum network itself have not been compromised. The investigation into the exact attack vector remains ongoing. We are working with ecosystem partners, security firms, and relevant parties to trace the stolen assets, and assess the full impact. We are committed to complete transparency and will continue providing updates as more verified information becomes available.
1
2
1
4
24,123
๐ŸšจALERT๐ŸšจOur system has detected multiple suspicious transactions involving @Ostium, a synthetic asset and perpetuals trading protocol, with an estimated loss of $23.7M. An address funded via #ChangeNow on the #ETH network bridged funds to #ARB and exploited the "PriceUpKeep" forwarder using future dated authorized oracle reports to generate artificial trading profits. All stolen funds have been swapped from $USDC to #ETH and distributed to different attacker controlled addresses. If you wish to safeguard yourself against such incidents, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
4
7
2
32
11,705
We are aware of the issue with the OLP vault. We have paused all trading. The team is investigating.
1
2
2,487
๐ŸšจALERT๐ŸšจOur system has detected a suspicious transaction involving @summerfinance_ with an estimated loss of $6M. An address funded via #FixedFloat on #Base executed a suspicious transaction on the #ETH network. Root cause: The attacker appears to have exploited a share accounting vulnerability through price manipulation. The stolen funds were then swapped to $DAI and transferred to an attacker controlled address. If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
3
6
1
30
10,490
๐ŸšจALERT๐ŸšจToday, @edeldotfinance's lending market suffered an exploit resulting in approximately $353K in losses. Root cause: The attacker manipulated the wGOOGLx collateral price, which is derived from its underlying GOOGLx balance, allowing them to borrow against the inflated collateral and drain approximately $353K. The attacker swapped the stolen assets for 224 ethereum:native (~$353K) and deposited the funds into @TornadoCash. If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
An Update from the Edel Team Earlier today, Edel identified and contained an exploit affecting Edel Lending. The exploit involved manipulation of the wrapped xStocks exchange rate between wGOOGLx and GOOGLx, causing wGOOGLx collateral to be valued at approximately 78x its correct value. The attacker used that inflated collateral value to borrow from the protocol, creating approximately $403k in protocol bad debt. Immediately after detection, the Edel team paused all V1 contracts. Edel V1 remains paused, and users should not interact with the V1 deployment while protocol activity is suspended. The team has preserved the relevant protocol records and is using them to determine affected balances for restoration. No depositor will bear any loss from this incident. The Edel team will absorb the bad debt and restore affected depositor balances 1:1. Edel V2 is being deployed with a redesigned oracle architecture intended to prevent this class of exchange-rate manipulation. Once deployment and balance restoration are complete, restored balances will be available directly in the Edel application. We will share timing as soon as it is finalized. We have traced the attackerโ€™s transactions and are coordinating with exchanges, ecosystem partners, and other relevant stakeholders. In parallel, we have extended a formal whitehat settlement offer to the responsible party, providing a defined window to return the remaining funds in exchange for an authorized security bounty. A full technical post-mortem will follow with the exploit path, root cause, and the changes introduced in Edel V2. This incident also reinforces the importance of EIP-01, which will introduce governance over protocol risk parameters, supported collateral, and future market configuration while preserving the teamโ€™s ability to respond immediately to security-critical events. Our immediate priorities are containment, user restoration, and transparent follow-up. We will continue updating users until affected balances have been restored in full. The Edel Team
2
10
4,611
๐Ÿšจ @CyversAlerts AI ๐Ÿ๐ฅ๐š๐ ๐ ๐ž๐ ๐ญ๐ก๐ž $๐Ÿ‘๐Ÿ”๐Œ @Humanityprot ๐ž๐ฑ๐ฉ๐ฅ๐จ๐ข๐ญ ๐š๐ฌ ๐ข๐ญ ๐ฎ๐ง๐Ÿ๐จ๐ฅ๐๐ž๐๐Ÿšจ On June 9, identity protocol Humanity was drained of ~$36M after an employee's laptop compromise exposed multisig keys, handing attackers bridge admin control across Ethereum and BNB Chain. They upgraded the contracts, drained ~141M $H, and minted 200M more straight to their own wallet. $H crashed over 80%. Our team broke down what the on-chain pattern actually showed, and why a single compromised endpoint became a protocol-wide crisis. "๐‘‡โ„Ž๐‘’ ๐‘–๐‘›๐‘๐‘–๐‘‘๐‘’๐‘›๐‘ก ๐‘ค๐‘Ž๐‘  ๐‘Ž๐‘› ๐‘œ๐‘๐‘’๐‘Ÿ๐‘Ž๐‘ก๐‘–๐‘œ๐‘›๐‘Ž๐‘™ ๐‘ ๐‘’๐‘๐‘ข๐‘Ÿ๐‘–๐‘ก๐‘ฆ ๐‘“๐‘Ž๐‘–๐‘™๐‘ข๐‘Ÿ๐‘’, ๐‘›๐‘œ๐‘ก ๐‘Ž ๐‘ ๐‘š๐‘Ž๐‘Ÿ๐‘ก-๐‘๐‘œ๐‘›๐‘ก๐‘Ÿ๐‘Ž๐‘๐‘ก ๐‘๐‘ข๐‘”." - @Meir_Dv, Co-Founder & CTO at Cyvers, told @DecryptMedia "๐ด ๐‘”๐‘’๐‘›๐‘ข๐‘–๐‘›๐‘’ ๐‘๐‘œ๐‘š๐‘๐‘Ÿ๐‘œ๐‘š๐‘–๐‘ ๐‘’ ๐‘ข๐‘ ๐‘ข๐‘Ž๐‘™๐‘™๐‘ฆ ๐‘ โ„Ž๐‘œ๐‘ค๐‘  ๐‘ ๐‘๐‘’๐‘’๐‘‘ ๐‘Ž๐‘›๐‘‘ ๐‘–๐‘š๐‘๐‘Ÿ๐‘œ๐‘ฃ๐‘–๐‘ ๐‘Ž๐‘ก๐‘–๐‘œ๐‘›: ๐‘“๐‘ข๐‘›๐‘‘๐‘  ๐‘Ÿ๐‘ข๐‘ โ„Ž๐‘’๐‘‘ ๐‘ก๐‘œ ๐‘“๐‘Ÿ๐‘’๐‘ โ„Ž ๐‘ค๐‘Ž๐‘™๐‘™๐‘’๐‘ก๐‘ , ๐‘ ๐‘ค๐‘Ž๐‘๐‘  ๐‘Ž๐‘ก ๐‘๐‘Ž๐‘‘ ๐‘๐‘Ÿ๐‘–๐‘๐‘’๐‘ , ๐‘š๐‘–๐‘ฅ๐‘’๐‘Ÿ ๐‘ข๐‘ ๐‘’, ๐‘Ž๐‘›๐‘‘ ๐‘›๐‘œ ๐‘–๐‘›๐‘ ๐‘–๐‘‘๐‘’๐‘Ÿ ๐‘ก๐‘–๐‘š๐‘–๐‘›๐‘”. ๐‘…๐‘–๐‘”โ„Ž๐‘ก ๐‘›๐‘œ๐‘ค ๐‘กโ„Ž๐‘’ ๐‘’๐‘ฃ๐‘–๐‘‘๐‘’๐‘›๐‘๐‘’ ๐‘–๐‘  ๐‘š๐‘–๐‘ฅ๐‘’๐‘‘, ๐‘คโ„Ž๐‘–๐‘โ„Ž ๐‘–๐‘  ๐‘คโ„Ž๐‘ฆ ๐‘กโ„Ž๐‘’ ๐‘ž๐‘ข๐‘’๐‘ ๐‘ก๐‘–๐‘œ๐‘› ๐‘–๐‘  ๐‘œ๐‘๐‘’๐‘›." - @Hakan_Cyvers, Senior Security Operations Lead at Cyvers, told @Cointelegraph The takeaway: key compromise now drives most stolen funds because one signer too often controls minting, upgrades, and treasury at once. The only real defense is watching on-chain behavior as it happens, not after the funds are gone. More insights from Cyvers experts quoted in @Cointelegraph, @decryptmedia, and @FinanceFeeds in the first comment ๐Ÿ‘‡ hashtag#cyvers hashtag#web3security hashtag#cryptosecurity hashtag#decrypt hashtag#cointelegraph
3
3
1
18
7,011
๐ŸšจALERT๐ŸšจOur system has detected a suspicious transaction involving Token of Power ($TOP), resulting in losses of approximately $1.58 million. An address funded through @TornadoCash executed a malicious transaction that drained funds from the TOP/WETH Balancer V1 Pool. The stolen assets were subsequently deposited into @TornadoCash If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
11
2
30
15,352
๐ŸšจALERT๐ŸšจToday, identity verification protocol @Humanityprot was exploited for approximately $30 million. The root cause appears to be a compromised private key, which allowed the attacker to gain admin privileges. As a result, multiple protocol controlled wallets were drained across the #Ethereum and #BNB Chain networks. Following a contract upgrade, the attacker abused the mint function to mint 100 million $H tokens at bscscan.com/tx/0x5a8f82f1064โ€ฆ The attacker then swapped the $H tokens for $BNB and $ETH, before consolidating the stolen funds across several wallets. If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
We're aware of a security incident involving the compromise of private keys belonging to a member of the Humanity Foundation. The safety of our community is our top priority, and we want to be fully transparent about what we know. As a precaution, please do NOT interact with the bridge or any liquidity pools until we give the all clear. This is the single most important step you can take to protect your funds right now. We are actively working with leading security experts and our exchange partners to assess the scope of the incident and secure all affected systems. We're deeply sorry that this has happened. Protecting this community is our responsibility, and we don't take that lightly. We will share verified updates as soon as we have them and we won't speculate before facts are confirmed. Official updates will only come from this account or @terencekwok Beware of the scammers and impersonators who exploit moments like this. We will never DM you first or ask for your seed phrase or private keys.
4
10
1
37
14,655
๐ŸšจALERT๐ŸšจOur system has detected multiple suspicious transactions involving @gravity_bridge, resulting in an estimated loss of $5.4M. The attacker drained: $4.3M $USDC 14,164 $PAYG (~$64K) 274 $ETH (~$553K) $434K $USDT The stolen assets were swapped into native $ETH, with a portion laundered through #ChangeNOW. The attacker currently retains approximately 2,064 $ETH ($4.1M). If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
4
7
4
42
4,523
๐ŸšจALERT๐ŸšจOur system has detected 7.2M suspicious transactions involving @THORChain router across $BTC, $Ethereum, $BSC and $Base networks. Stolen funds include: $USDT. $USDC, $WBTC, $DAI, $THOR, $LUSD, $XRUNE, $GUSD, $AAVE, $LINK $FOX etc. All stolen funds are swapped to $ETH and consolidated at 0xd477b69551f49C0519F9B18c55030676138890Bd If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
3
8
3
38
10,046
๐Ÿšจ Cyvers Alerts ๐Ÿšจ retweeted
๐Ÿš€ Excited to share that I represented @CyversAlerts at The Pitch by @deel , presented by @jpmorgan, won the Tel Aviv regional finals, and advanced to the global finals to compete for the $1M prize. Proud to see Cyversโ€™s innovation recognized on a global stage. #ThePitchByDeel
2
1
9
1,659
Cyvers co-founder @Meir_Dv told @Cointelegraph Aprilโ€™s spike was driven by a small number of โ€œprecision strikes,โ€ as attackers increasingly target high-liquidity protocols. He said the month ranks among the worst for DeFi hacks in five years, with losses driven by social engineering and cross-chain complexity. cointelegraph.com/news/cryptโ€ฆ
2
3
5
2,564
๐ŸšจALERT๐ŸšจOur system has detected a suspicious transaction involving @EkuboProtocol. An address funded via #Railgun executed a single transaction, generating approximately $1.4M on the #ETH network. The attacker received 17 $WBTC, swapped them for #ETH, and subsequently deposited the funds into @TornadoCash. Note: Those who approved specific v2 contract should revoke ASAP. If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
2
8
3
28
5,728
๐ŸšจALERT๐ŸšจOur system has detected multiple suspicious transactions involving @wasabi_protocol An address funded via @TornadoCash deployed a malicious contract on both #Base and #Ethereum, extracting approximately $4.5M across multiple assets, including $WETH, $PEPE, $MOG, $USDC, $BITCOIN, $VIRTUAL, $ZYN, $REKT, $cbBTC, and $AERO. The stolen funds were consolidated into $ETH, bridged to the Ethereum network, and subsequently distributed across multiple addresses. If you wish to safeguard yourself against such scams, please contact us to arrange a demo of our solution at calendly.com/d/cqjd-77h-r6x/โ€ฆ #CyversAlert
3
13
5
67
7,728