Speadefi Hack

Steadefi, a Yield Aggregator on Arbitrum and Avalanche, was exploited, losing 624.63 ETH worth 1,148,309 USD.

On Aug 07, 2023, Steadefi's multiple pools on both Arbitrum and Avalanche chains were exploited due to compromised private keys of the deployer. The attacker changed the owner of the pools to another EOA and utilized owner privileges to withdraw various assets including WBTC, WETH, and USDC. These stolen funds were bridged to the Ethereum chain via the Synapse Bridge and transferred to another EOA currently holding the accumulated ETH.

The total losses are:

- Avalanche: 333,071 USD worth of WBTC, WETH, WAVAX, and USDC

- Arbitrum: 815,238 USD worth of WBTC, WETH, and USDC

- Overall loss: 1,148,309 USD worth 624.63 ETH

Ethereum:

Attacker Address:

- https://etherscan.io/address/0x9cf71f2f…8810dc

Funds Holder:

- https://etherscan.io/address/0xE10d4a5b…0aca36

Funds Transfer Transaction:

- https://etherscan.io/tx/0x348ca019…bea277

Avalanche:

Malicious Transactions:

- https://snowtrace.io/tx/0x2425a422…f9fc71

- https://snowtrace.io/tx/0xd82491c7…178cda

- https://snowtrace.io/tx/0xd280f22d…f130eb

Arbitrum:

Malicious Transactions:

- https://arbiscan.io/tx/0xa193821c…8f85c4

- https://arbiscan.io/tx/0x5983968b…aa9cef

- https://arbiscan.io/tx/0x141119aa…ecb125