Ethereum Hive Hack

EthereumHive project exploited, resulting in the loss of 744 million EHIVE tokens worth 15,569 USD (9.32 ETH).

EthereumHive, a project running on the Ethereum chain, was exploited on August 21, 2023, through a reentrancy attack. The attacker used a rewarding issue in the EHIVE token's smart contract which allowed stakes with zero amount. They created multiple contracts and staked 0 EHIVE tokens from each of them.

By calling stake and unstake immediately in each contract, the attacker increased reward amounts, ultimately minting 744 million EHIVE tokens. These tokens were exchanged for over 9 ETH, equivalent to 15,569 USD. The stolen funds were deposited into TornadoCash.

Attacker Address:

https://etherscan.io/address/0x0195448a…234bb5

Malicious Transactions:

https://etherscan.io/tx/0xad818ec9…a511c1

https://etherscan.io/tx/0xd9156f50…642114

Malicious Contract Addresses:

https://etherscan.io/address/0x98C2e1E8…80B892

https://etherscan.io/address/0xE7d9a935…6Dcb84

TornadoCash Deposit Transaction:

https://etherscan.io/tx/0x61bfbd48…af185d