据Cyvers Alerts系统监测,本系统检测到涉及Nervos.bit的多笔可疑交易。一个可疑地址似乎已经控制了跨链桥,窃取了价值约300 万美元的资产: 25.78 万 枚USDT 539.09 枚ETH 89.83 万 枚USDC 6.04 万 枚DAI 0.79 枚WBTC 所有资金都被兑换成 $ETH 并发送到了Tornado Cash。
Cyvers Alerts posted on the X platform that the system detected a suspected attack on Cork Protocol and lost about $12 million. The attacker deployed a malicious contract at 11:23:19 UTC on May 28, 2025, which was funded by 0x4771... 762B (probably a service provider). Just 16 minutes and 45 seconds later, the attacker launched an attack and successfully obtained 3,761.87 wstETH, which was quickly exchanged for ETH. The funds have not been transferred to other addresses.
Cyvers Alerts said in a post on the X platform that about 82,279.85490689 NUMA and 283 rETH have been stolen by monitoring the Numa protocol on the Arbitrum chain. The attackers bridged the relevant assets to Ethereum and deposited the funds into Tornado.cash.
According to Cyvers Alerts, the 1ROR/WETH fund pool on the Ethereum network was attacked. The attacker exploited a vulnerability in the emergency withdrawal function (emergency Withdraw), causing about $780,000 in losses. The Cyvers system had detected the malicious contract the day before the attack. After completing the attack, the attacker quickly exchanged the funds for Ethereum and transferred them through multiple wallets, some of which went to the mixer Tornado Cash.
据Cyvers Alerts监测,以太坊网络上的1ROR/WETH资金池遭遇攻击。攻击者利用紧急提现功能(emergency Withdraw)中的漏洞,造成约78万美元损失。 Cyvers系统在攻击发生前一天已检测到恶意合约。攻击者在完成攻击后,迅速将资金兑换成以太坊,并通过多个钱包转移,部分资金已流向混币器Tornado Cash。
据Cyvers Alerts监测,系统检测到多起涉及UPCX Official的可疑交易。似乎有人获得了地址 0x4C 的访问权限,升级了“ProxyAdmin”合约,并执行了“withdrawByAdmin”函数,导致从三个不同的管理账户转移了 1840 万 UPC(约 7000 万美元)。 截至目前,所有资金仍保留在地址 0xFf7 中,尚未检测到任何交换。同时官方团队已承认此事件,并表示“检测到未经授权的活动”。
Cyvers Alerts 官方表示,监测到与去中心化社交协议 Mask Network 创始人 Suji Yan 相关的可疑交易,一个可疑地址收到了近 400 万美元的数字资产,被盗的资产立即被兑换成 ETH,并转移到六个不同的地址。
According to Cyvers Alerts monitoring, the lending protocol zkLend suffered a loss of $4.90 million on the Starknet network. The attacker will steal the funds across the chain to Ethereum and wash them through the privacy protocol Railgun, but due to Railgun policy restrictions, the funds are forced to return to the original address.
Cyvers Alerts posted on the X platform that multiple suspicious transactions of Phemex hot wallets were detected, covering multiple chains. Digital assets worth more than $29 million have been transferred on chains including BNB, ETH, OP, POL, BASE and ARB through suspicious addresses. These addresses have started to exchange assets for ETH.
According to Moon Whales monitoring, Cyvers found a number of suspicious transactions involving FEG on the ETH, BNB and Base networks, with a total loss of more than $1 million. FEG team worked with PeckShield and CEX trading has been suspended.