Celer Bridge Hack

The cBridge was the victim of a DNS attack during which users who used the bridge through the web interface lost their funds. During the attack, the total damage from users amounted to about $240k.

Celer cBridge is a decentralized and non-custodial asset bridge that supports 110+ tokens across 30+ blockchains and layer-2 rollups.

A vulnerability in the hosting security system was used by a hacker to gain control of the bridge domain and change the external interface to redirect funds passing through the platform to a wallet controlled by the hacker.

Unsuspecting people made exchanges from one blockchain to another and noticed that they could not get their funds. Team members noticed this and issued a warning post on Twitter.

Before the Celer Network team noticed the problem, the hacker managed to take $ETH 128 and withdraw all funds through Tornado.Cash.

Involved addresses:

- Ethereum: https://etherscan.io/address/0x2A2aA504…3318E8

- BSC: https://bscscan.com/address/0x5895da88…31e7CF

- Polygon: https://polygonscan.com/address/0x9c8b72f0…eec9f9

- Avalanche: https://snowtrace.io/address/0x9c8b72f0…eec9f9

- Arbitrum: https://arbiscan.io/address/0x9c8b72f0…eec9f9

- Astar: https://astar.subscan.io/account/0x9c8B72f0…eec9F9?tab=transaction

- Aurora: https://aurorascan.dev/address/0x9c8b72f0…eec9f9

0x81d3ec77438b4e99aa99ba25b1dbc3fea317fe3b0x81d3ec77438b4e99aa99ba25b1dbc3fea317fe3b