Vulcan Forged Hack

Vulcan Forged project was exploited, and the private keys of 96 wallets were stolen with the assets of total worth 140,000,000 $USD

Vulcan Forged creates wallets on behalf of its users and stores private keys on their own side. As a result, the leak of access to the private keys has affected 96 wallets and based on the token price during the hack, victims suffered a $140m total loss. Assets including ETH and MATIC have also been taken out.

96 transactions, where the hacker steals PYR token:

https://explorer.bitquery.io/matic/txs/transfers?receiver=0x48ad05a3…2c73b1&currency=0x348e6213…b380a9

Transactions, where PYR token was exchanged for MATIC, which later was distributed between external wallets:

https://explorer.bitquery.io/matic/txs/transfers?receiver=0x48ad05a3…2c73b1&currency=MATIC

Selling on Ethereum:

https://bloxy.info/txs/calls_from/0x48ad05a3…2c73b1?signature_id=1493863&smart_contract_address_bin=0x11111112…43097d

https://bloxy.info/txs/calls_from/0x48ad05a3…2c73b1?signature_id=1493862&smart_contract_address_bin=0x11111112…43097d

Part of the stolen funds was distributed between different external wallets as well as the other one was sold on Uniswap and QuickSwap.

Attacker address on Polygon:

https://polygonscan.com/address/0x48ad05a3…2c73b1

Attacker address on Ethereum:

https://etherscan.io/address/0x48ad05a3…2c73b1

2,000,000 PYR tokens are still held on this wallet:

https://etherscan.io/address/0xe3cd90be…e53b66#tokentxns