A hacker compromised Furucombo’s proxy smart contract, which enabled them to withdraw ETH and ERC-20 tokens.
Share this article
URL Copied
Furucombo, a dApp focused on easily creating multi-step transactions for trading and DeFi without knowing how to code, just got compromised. At press time, a hacker managed to drain over $14 million of users’ funds.
Furucombo, a dApp focused on easily creating multi-step transactions for trading and DeFi without knowing how to code, just got compromised. At the moment of writing, a hacker managed to drain over $14 million of users’ funds.
The hacker compromised Furucombo’s proxy smart contract, which enabled them to withdraw ETH and ERC20 tokens.
The hacker’s transaction draining ERC20 tokens. Source: Etherscan.
The hacker then started sending funds to the mixer Tornado Cash to cover their tracks and withdraw funds.
The hacker’s transaction to Tornado Cash. Source: Etherscan.
Currently, the hacker’s address holds over 4,560 ETH, worth roughly $6.8 million, and more than $7 million in ERC20 tokens, including more than 5.5 million DAI. These holdings do not include funds that were sent to Tornado Cash for laundering.
Anyone who interacted with Furucombo proxy should revoke their approvals to withdraw funds from their wallet using Revoke. The addresses of Furucombo contracts to check:
0x57805e5a227937BAc2B0FdaCaA30413ddac6B8E1
0x17e8ca1b4798b97602895f63206afcd1fc90ca5f
Over the last year, there were numerous hacks and exploits of DeFi protocols. The space is nascent, but the Total Value Locked in DeFi smart-contracts continues to grow, exceeding $37 billion at the time of press. Furucombo’s hack is another reminder for DeFi users to seriously consider contract security and not use money in new protocols that they can’t afford to lose.
Share this article
URL Copied
The information on or accessed through this website is obtained from independent sources we believe to be accurate and reliable, but Decentral Media, Inc. makes no representation or warranty as to the timeliness, completeness, or accuracy of any information on or accessed through this website. Decentral Media, Inc. is not an investment advisor. We do not give personalized investment advice or other financial advice. The information on this website is subject to change without notice. Some or all of the information on this website may become outdated, or it may be or become incomplete or inaccurate. We may, but are not obligated to, update any outdated, incomplete, or inaccurate information.
You should never make an investment decision on an ICO, IEO, or other investment based on the information on this website, and you should never interpret or otherwise rely on any of the information on this website as investment advice. We strongly recommend that you consult a licensed investment advisor or other qualified financial professional if you are seeking investment advice on an ICO, IEO, or other investment. We do not accept compensation in any form for analyzing or reporting on any ICO, IEO, cryptocurrency, currency, tokenized sales, securities, or commodities.
Decentralized finance aggregator platform Furucombo has raised $1.85 million in a seed funding round from leading DeFi venture capitalists. Furucombo’s DeFi Legos Earn Investors’ Attention The funding round was led...
Furucombo takes the “money legos” slogan and turns into a single platform. The slogan refers to the reduction of traditional financial tools into their constituent parts. Once reduced to these...
Following 1inch’s well-received token airdrop, Crypto Briefing experimented with several other protocols that may be next to launch a token. Here, we list our top ten. Early Users Reap Airdrops...
