Rs 899 Crore Worth Of Cryptocurrency Stolen From Decentralised Platform BadgerBAO

Around $120 million (roughly Rs 899 crore) were stolen from multiple cryptocurrency wallets on decentralised finance platform BadgerDAO on Wednesday. BadgerDAO is now investigating the issue with blockchain data and analytics firm PeckShield. A report in The Verge says that the members of the BadgerDAO team have told users that they believe the issue came from someone inserting a malicious script in the UI of their website.

For users who interacted with the site when the malicious script was active, it would intercept Web3 transactions and insert a request to transfer the victim’s tokens to the attacker’s chosen address. The good part is that due to the transparent nature of the platform, everyone can see what happened once the attackers launched their script. Peckshield said that one transfer put 896 Bitcoins worth more than $50 million (roughly Rs 374 crores) into the attackers account.

The malicious script appeared as early as November 10 on the BadgetDAO website, and the attackers ran it at random intervals to avoid detection. However, once the BadgerDAO system became aware of the issue, it paused all smart contracts, basically freezing its platform and advised users to decline all transactions to the attacker’s address.