Kiloex DEX Hacked for $7 Million

by

It appears that decentralized exchange Kiloex has fallen victim to the most expensive game of digital hide-and-seek ever, losing a staggering $7 million to what can only be termed as a spectacular heist. The culprits? A potential price oracle vulnerability, perpetrated by an attacker who is probably feeling quite pleased with themselves — and perhaps a little too smug, eh?

Kiloex Calls for Blacklisting of Attacker’s Address

Kiloex, which operates on the BNB Smart Chain, has confirmed its unfortunate position as the latest star in the $7 million cyber soap opera. According to the keen-eyed folks over at Cyvers, the address of our notorious thief—rumored to be luxuriating in anonymity via Tornado Cash—has audaciously executed a series of exploitative escapades across the BNB, Base, and Taiko chains.

It seems Cyvers has uncovered a potential vulnerability, like an unguarded cookie jar, and they were on it faster than you can say “Whoops!” Just hours before Kiloex threw up the distress signal, Cyvers warned that the nefarious accountant was “still actively exploiting the system.” Talk about being fashionably late to the party!

In a twist of fate that could only come from a poorly-written screenplay, Kiloex has since called for the digital equivalent of a bouncer to blacklist the attacker’s address, hoping to shut the door on any further mischievousness. After all, you wouldn’t let a cat burglar waltz back into the club, would you?

In a subsequent post on X, Kiloex shared its blueprint for a treasure hunt—tracing the stolen funds and launching a bounty program. Yes, folks, it’s like “Pirates of the Caribbean,” but with less swashbuckling and more spreadsheets.

“The exploit has been contained,” the team declared, as if trying to reassure themselves more than anyone else. They swiftly suspended platform usage, summoning their best security brains to track down the roaming funds faster than a kid on a sugar high. A bounty program is on the way; who doesn’t love a good treasure hunt?

Yet, in a later post directed at the hacker, Kiloex teased a little bit of drama. They claimed to have the backing of law enforcement and multiple exchanges, bravely announcing they had uncovered “critical” intel. They issued an ultimatum, threatening to freeze those ill-gotten gains unless the hacker returned 90% of the loot within 72 hours. The hacker gets to keep 10%—an amusing “white hat bounty” for their troubles. What a generous offer!

So, here’s the deal: agree to these terms, and Kiloex will publicly applaud the newfound partnership and cease its pursuit. Ignore the offer, and well, let’s just say things might escalate faster than an unwelcome visit from the taxman!

Read More

2025-04-15 16:27