MonoSwap, which describes itself as a “Blast native liquidity space” introduced through its X account that it has been hacked.
The submit saying the hack particulars how a developer for MonoSwap “installed a phishing app to join a call with scammers who pretended to be a VC. The attackers installed the botnet into his office PC, which has access to all MonoSwap-related wallets and contracts.”
It additionally notes that “the hackers then withdrew most of the staked liquidity positions, causing damage to the protocol.”
The unique submit included a hyperlink to the hacker’s web site, however this was eliminated after Protos reached out to ask, “Do you suppose it was prudent to offer a hyperlink to the hacker’s web site in your announcement submit?“
Learn extra: Blast L2-based lending platform makes expensive error, liquidating customers for $26M
MonoSwap’s documentation has a web page labeled ‘Security Measures’ which claims “MonoSwap’s expertly crafted smart contracts are developed by seasoned professionals with a deep understanding of the industry. We prioritize the safety and optimization of your investments by incorporating a robust set of features and security measures.”
Moreover, it has a web page labeled ‘Audits’ which optimistically claims “Coming soon,” although the web page additionally says “Last updated 6 months ago.”
The protocol has extra immaturities, together with describing its wrapped token, xMONO, as a governance token, even if, so far as Protos has been in a position to decide, there isn’t any voting mechanism to at present use these governance tokens for governance.
Protos has reached out to MonoSwap for clarification on the standing of the protocol audits, why one govt had entry to all of those mission essential assets on their laptop, and what the usage of the governance token is. At press we have now not obtained a response.
Information from DefiLlama reveals the ‘Total Value Locked’ for this protocol dropping from roughly $1.5 million to $200,000 right now.
Acquired a tip? Ship us an e mail or ProtonMail. For extra knowledgeable information, comply with us on X, Instagram, Bluesky, and Google Information, or subscribe to our YouTube channel.