Infini crypto bank lost $49.5 million in a hack by a former developer
Hacker exploited administrative privileges, accessed private key, and converted funds to Ethereum
Infini's founder acknowledged the breach, offered compensation, and aimed to recover stolen funds
Incident highlighted risks of retained admin privileges in smart contracts
Infini assured users that all transactions were unaffected
The breach adds to concerns about security in the DeFi space
360 summary
Christian Li admitted negligence in transferring authority, taking full responsibility for the breach.
Li offered the hacker 20% of the stolen amount as a reward for returning the funds, emphasizing a desire to resolve the situation amicably.
Despite the breach, Infini continued to allow withdrawals, with Li assuring users of full compensation in the worst-case scenario.
decrypt.co
Hakan Unal emphasized the critical risks of retained administrative privileges in smart contracts, urging projects to thoroughly audit and revoke unnecessary permissions post-deployment.
QuillAudits research team highlighted the importance of treating access control as a core security priority rather than an afterthought to prevent future hacks.
The research team stressed that addressing these security issues requires not just better technology but also the development of better security habits within projects.
decrypt.co
Explore
The above information is compiled by decrypt.co and does not represent any position of Arbor. It does not constitute any investment advice made by Arbor. Before making any investment decisions, investors should consider the risk factors related to the investment products based on their own circumstances and seek advice from professional investment advisors if necessary. We strive to ensure but cannot guarantee the truthfulness, accuracy, and originality of the above content, and we make no promises or guarantees in this regard. As machine learning has a probabilistic nature, it may lead to incorrect reflection of facts in certain situations. You should appropriately evaluate the accuracy of any information summary based on your usage, including through manual evaluation of the information summary. We are not responsible for any losses or liabilities incurred by you due to your use, viewing, and access of the platform or failure to do so.