Data leak [loss] $3M+

"Socket, Bungee Restart Operations After Apparent $3.3M Exploit"

2024-01-16 [vendor] Socket
Primary Source ↗
Financial Loss $3.3M (3,300,000 USD)
Recovered $2.3M
Affected 700 individuals/accounts

Incident Details

The Socket cross-chain infrastructure protocol was hacked for around $3.3 million in an attack that exploited its Bungee bridge. The thieves were able to exploit a bug that allowed them to take assets from those who had granted approval to a portion of the system called SocketGateway.A little over 700 victims were affected, and the highest loss from a single wallet was around $657,000. 121 wallets lost assets priced at more than $10,000.On January 23, the protocol announced they had recovered 1,032 ETH (~$2.23 million) of the stolen funds.

Total loss estimated at $3,300,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Socket

Timeline

  1. 2024-01-16 Breach occurred
  2. 2024-01-16 Publicly disclosed