What if a hack could change the way we view decentralized finance forever?
Onyx, a once prominent player in the Ethereum-based lending market, faced a staggering setback recently. They announced a significant shutdown of their lending segment after a major security breach led to a loss of $3.8 million. This wasn't just a random attack; it took advantage of well-known security vulnerabilities that Onyx has failed to fully address.
The same vulnerability was used to attack Onyx back in October 2023. This is a huge punch in the gut for the crypto community and a huge wake-up call for the community to view the security issues surrounding crypto more seriously, especially with an increasing sophistication of cybercriminals exploiting weakness in the crypto ecosystem.
Onyx is set to relaunch as Onyx Core. They're making a bold move to emphasize governance and community involvement. The restructuring will involve running the Onyx Protocol as a close-ended lending protocol on Onyx Core, allowing users to wrap non-fungible tokens, real-world assets (RWA) and crypo assets. This move would prevent future exploits, like the one that occurred through a NFTLiquidation contract vulnerability, which was previously used in an attack in October 2023.
This Onyx Improvement Proposal (OIP-46), titled "Relaunch Onyx Core", was introduced on the same day as the $3.8 million security exploit. In the announcement, Onyx said that they would be shutting down their Ethereum-based lending market and reimbursing the lenders in full.
The OIP-46 proposal announcement has received the full blessing from the Onyx community members, with no votes against the proposed changes. The relaunch will start on October 1.
As part of the relaunch, the Onyx team will be issuing a revised white paper and focus on running Onyx Core as a close-ended lending protocol.
This restructuring comes at a time when crypto hacks have been on the rise, with centralised exchanges being the primary targets, accounting for losses exceeding $2.1 billion in 2024.
According to security firm PeckShield, the hackers took loot a total of 4.1 million virtual USD (VUSD), 0.23 Wrapped Bitcoin (WBTC), $5,000 worth of the DAI stablecoin,$50,000 worth of the USDT stablecoin from Onyx, totalling over $3.8 million in losses.
The vulnerability can be exploited when a DeFi protocol has an "empty market" - a market with no liquidity - which typically occurs when a new market is launched.
Cases of DeFi exploits have risen in numbers in recent times. Just days before the Onyx attack, Bedrock, a liquid staking protocol, lost over $2 million due to a vulnerability in its uniBTC contract. Another decentralised platform, Bankroll Network, also suffered the same fate, after it suffered a $230,000 loss after hackers exploited a faulty "buyFor" function.
The frequency of crypto hacks has surged in 2024, with $542.7 million stolen in the first quarter alone—a 42% rise compared to the same period in 2023. July was especially devastating, as over $266 million was taken in 16 separate attacks. One of the most significant incidents involved a $230 million theft from the Indian exchange WazirX, marking the second-largest hack of the year.
A UK court denied James Howells' bid to recover a hard drive with 8,000 Bitcoin buried in a Newport landfill, citing high excavation costs and environmental concerns. Mined in 2009, the lost Bitcoin is now worth over $750 million.
CatherineEl Salvador continues to buy Bitcoin, including a recent purchase of 11 BTC, increasing its total holdings to over 6,000 BTC. President Bukele has also expressed interest in acquiring Bitcoin seized by the U.S. government, further solidifying the country’s commitment to cryptocurrency.
Anais
AlexHo Chi Minh City is using AI to control traffic lights at key intersections to improve traffic flow and reduce congestion. The city is also testing Digital Twin technology to monitor real-time conditions and plans to expand these systems to more areas.
WeatherlySingapore has blocked Polymarket, labelling it an unlicensed gambling platform under its strict betting laws. The platform also faces regulatory scrutiny in the US and France, putting its global future in question.
CatherineMango Markets, a Solana-based DEX, is shutting down after an SEC settlement, governance disputes, and legal issues from a 2022 exploit. Users are urged to close positions as the platform winds down to preserve remaining assets.
KikyoJamie Dimon, CEO of JPMorgan, reiterated his skepticism about Bitcoin, calling it "useless" and without intrinsic value, while highlighting its use in illegal activities. Despite Bitcoin's rise in popularity, Dimon remains unconvinced of its legitimacy and long-term value in the financial landscape.
AnaisLitecoin’s X account was hacked to promote a fake Solana-based token using the LTC ticker, following a similar attack on Foresight Ventures. Hackers are increasingly using phishing emails disguised as X communications to steal user credentials. Will cyber attacks escalate in 2025?
CatherineA 47-year-old man, Kurrimela Ramesh Goud, was arrested in India for defrauding investors of over Rs. 95 crores ($11 million) through a fake cryptocurrency platform. Authorities are investigating the large-scale scam and expect more victims to come forward.
WeatherlyOver 7 million OpenSea user emails have been fully exposed after a data leak from the marketplace’s automation vendor in mid-2022, giving scammers new opportunities for phishing. Is your email at risk?
Kikyo
