Sep 2024 - Truflation TRUF Token Malware Attack - $5m (Global)

"Decentralized Infrastructure For Real World Asset Metrics"
"RWAs are about to bring massive sums of money on-chain. This shift not only promises to enhance liquidity within digital markets but also aims to bridge the gap between TradFi assets and DeFi technology, enabling a more inclusive and versatile financial landscape."
"Precise and up-to-date information ensures that digital representations of real-world assets are accurate, trustworthy, and capable of fostering confidence among investors."
"In an era where skepticism towards official data and statistics is growing, the demand for transparent, decentralized, and verifiable data sources is more pressing than ever."
"According to on-chain sleuth ZachXBT, the project Truflation was hacked a few hours ago for $5M+ on multiple chains from the treasury multisig and personal wallets."
"On September 25th, 2024, the Truflation team detected some abnormal activity. An attacker launched an attack using malware.
We are currently monitoring the situation and are taking measures to protect funds while we are investigating and working with law enforcement. The Truflation team is actively working with leading industry partners to further clarify the incident and will continue to try to contact the attacker to recover the assets.
Staking is unavailable at this time and there is limited liquidity on DEXs. Should the hackers decide to negotiate please contact: security@truflation.com.
We will continue to keep you updated and we are offering a reward to any white hats offering assistance."
"To safeguard the Truflation ecosystem after the recent hack, we’re redistributing TRUF tokens. Migration starts tomorrow, October 29, at 11 am UTC for whitelisted addresses only."
Further Analysis
The truflation project aims to aggregate data from around the world to create true feeds of data such as inflation, and has since expanded into a number of other metrics. The project has a TRUF token launched. On September 25th, 2024, a malware attack targeted the project at stole $5m USD worth of tokens. The project attempted to negotiate with the attacker and offer a $500k bounty, however there was no response. The project has ultimately launched a new token and is running the community through a migration.
How Could This Have Been Prevented?
More Cryptocurrency Exchange Hacks/Scams/Frauds
Onyx Protocol Low Liquidity NFTLiquidation Vulnerability > > < < ether.fi Domain Name Failed Takeover Attempt
Sources/Further Reading
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@i Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
Ethereum Transaction Hash (Txhash) Details | Etherscan
(Dec 31)
Address 0x2867c57ddef630d64bfedb70b70b4b6c6c4c9187 | Etherscan
(Dec 31)
Fake_Phishing554189 | Address 0x2122a76213b23daf633b850cb659750db0cac801 | Etherscan
(Dec 31)
@messages Twitter (Dec 31)
Ethereum Transaction Hash (Txhash) Details | Etherscan
(Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
@truflation Twitter (Dec 31)
TRUF Token FAQ: Powering Permissionless Access to Financial Data | Truflation
(Dec 31)
t.me/QuadrigaInitiative
|
/r/QuadrigaInitiative
|
@QuadrigaInit
|
info@quadrigainitiative.com
|
t.me/QuadrigaInitiative
/r/QuadrigaInitiative
@QuadrigaInit
info@quadrigainitiative.com