Dec 2024 - DeBox Social External EOA Wallet Private Key Leak - $275k (Global)
DeBox is an all-in-one Web3.0 social platform designed to simplify interaction within the Web3 ecosystem. It has achieved significant milestones, including $383 million in transaction volume, over 10 million users, and substantial community engagement. DeBox offers various services, including DeSwap for decentralized swapping, and the DeBox Guardians NFTs, which are part of its community and ecosystem. With a focus on making Web3 easier to navigate, the platform aims to empower users through its token, $BOX, and create a user-friendly environment for both developers and investors.
"Asset Loss Overview:
•ETH: 31.0282
•BOX: 4,879,079.3995"
"Whether it was stolen or the project owner dumped the project and ran away, there is no clear official statement yet, so let us wait and see."
"Debox rug, remember everyone also played scratch lottery, damn. The official said it was stolen, or did he run away? All the pools on the chain have been withdrawn. Magic blockchain, a new melon every day, each melon is different."
"The official announcement states that due to the leakage of the private key from the operator’s personal EOA wallet, 31.03 ETH and 4.879 million BOX were stolen. The official emphasized that this incident does not involve the security of platform users’ assets, assuring the community that their funds are safe."
"The social project #Debox @DeBox_Social was drained today. The price of the coin has fallen by 95% since September. Is it a Rug or stolen? Keep watching"
"Breaking: The previously popular DeBox in the Chinese-speaking community seems to have run away! Oh my God! This shows that anything related to "DE" or "X" is not safe! Everyone, please check if you have linked DeBox and disconnect it to avoid further asset losses! #DeBox
@DeBox_Social"
"The once-popular DeBox project in the Chinese-speaking community seems to have run away, with funds already cashed out through exchanges and liquidity pools withdrawn from the blockchain. The project team claims the wallet was stolen, but due to the frequent occurrence of "insider theft" in the industry, further updates are awaited. Please stay tuned, and we will continue to follow up on the situation."
"It is really shocking that there is no multi-signature wallet and the asset management of the project is too casual."
"It's just a few lines of words, but behind them are tens of thousands of dollars of tuition fees"
"It's 2024, is there any EOA account private key leak? It is recommended to replace the CTO"
"II. Action Plan:
1. Stabilization Fund Deployment:
The Stabilization Fund will be used to purchase back all stolen tokens from the exchange, with completion expected within one week.
2. Token Allocation:
All repurchased tokens will be injected into the BOX DAO assets. The community will vote to decide their use.
3. Account Security Update:
The DeBox Social operational account will transition to a multi-signature wallet once DeBox App supports multi-signature logins.
4. Accountability and Recovery:
A professional security firm will handle the investigation and asset tracing. Updates on the recovery process will be provided regularly. Any recovered assets will be managed through BOX DAO voting.
DeBox will continue to trace the theft address and reserves the right to take all necessary legal actions to pursue accountability.
DeBox has always placed the community at its core, striving to build an open, transparent, and sustainable ecosystem.
We sincerely appreciate your understanding and support. Together, we believe DeBox will emerge stronger and more resilient."
Further Analysis
DeBox is a Web3.0 social platform which reportedly has significant community engagement. On December 1st, 2024, a wallet with a large amount of box token was compromised, leading to a significant drop in price as those tokens were quickly liquidated. DeBox has posted on social media to address the issue. Very few external firms appear to be tracking the funds, and it does not appear that any recovery is in progress.
How Could This Have Been Prevented?
More Cryptocurrency Exchange Hacks/Scams/Frauds
BasedBrett Solana Brett Token Rug Pulls Via Twitter/X > > < < Clipper Exchange Asset Deposit/Withdrawal Manipulation
Sources/Further Reading
@debox_social Twitter (Dec 31)
DeBox: The all in one Web3 community tools. (Dec 31)
@Crypto_He Twitter (Dec 31)
@0xCryptoUni Twitter (Dec 31)
@DeSwap_Official Twitter (Dec 31)
@elonmusk0520 Twitter (Dec 31)
@numbzc888 Twitter (Dec 31)
@blockamotoo Twitter (Dec 31)
@okkp7537 Twitter (Dec 31)
@yuexiaoyu111 Twitter (Dec 31)
@blockamotoo Twitter (Dec 31)
@jintiankankan11 Twitter (Dec 31)
@bpaynews Twitter (Dec 31)
@zhendehengeili Twitter (Dec 31)
@BenWAGMI Twitter (Dec 31)
@hexad_army Twitter (Dec 31)
@w3__debox Twitter (Dec 31)
@johnmorganFL Twitter (Dec 31)
@yuexiaoyu111 Twitter (Dec 31)
@0xotmk Twitter (Dec 31)
@yuexiaoyu111 Twitter (Dec 31)
@Yee92480343 Twitter (Dec 31)
@_koling_ Twitter (Dec 31)
@yuexiaoyu111 Twitter (Dec 31)
@sinanz00 Twitter (Dec 31)
@spacen1ght Twitter (Dec 31)
@genfenggoudaib1 Twitter (Dec 31)
@1453Gurbuz Twitter (Dec 31)
@BenWAGMI Twitter (Dec 31)
@DeBox_CN Twitter (Dec 31)
@john28463719 Twitter (Dec 31)
@cryptonewsz_ Twitter (Dec 31)
@metavers_bit Twitter (Dec 31)
@CodeShelby Twitter (Dec 31)
@yuexiaoyu111 Twitter (Dec 31)
@yuexiaoyu111 Twitter (Dec 31)
@blockamotoo Twitter (Dec 31)
@DeBox_CN Twitter (Dec 31)
@QHKX888 Twitter (Dec 31)
@CryptoXin127 Twitter (Dec 31)
@0xCryptoUni Twitter (Dec 31)
@pandaBA007 Twitter (Dec 31)
@numbzc888 Twitter (Dec 31)
@DeSwap_Official Twitter (Dec 31)
@yuexiaoyu111 Twitter (Dec 31)
@MemeSiguoyi Twitter (Dec 31)
@btcbagua Twitter (Dec 31)
@XChainNews Twitter (Dec 31)
@MetaEraCN Twitter (Dec 31)
BlockThreat - Week 48, 2024 (Dec 31)
@crynetio Twitter (Dec 31)
Crypto Weekly Hack Report: Why Multi-Factor Authentication Is Crucial in 2024 (Dec 31)
@MistTrack_io Twitter (Dec 31)
@laochen12 Twitter (Dec 31)
@tungzay1 Twitter (Dec 31)
$0.02 | DeBoxToken (BOX) Token Tracker | Etherscan
(Dec 31)
 t.me/QuadrigaInitiative
|
 /r/QuadrigaInitiative
|
 @QuadrigaInit
|
 info@quadrigainitiative.com
|