Ankr Claims an Ex-Team Member Placed Malicious Code That Led to Exploits for aBNBc Tokens

let atwWrapper,atwContainerWidth,atwSliderBox,atwTotalWidth; function initATWSlider() { atwWrapper = $('.relatedInstruments'); atwSliderBox = atwWrapper.find('.slider'); atwContainerWidth = atwWrapper.width(); atwTotalWidth = atwSliderBox.width(); if(window.domainId === '2' || window.domainId === '3'){ atwWrapper.find('.sliderRight').addClass('js-slider-prev'); atwWrapper.find('.sliderLeft').addClass('js-slider-next'); } else { atwWrapper.find('.sliderRight').addClass('js-slider-next'); atwWrapper.find('.sliderLeft').addClass('js-slider-prev'); } if(atwSliderBox.find('.instrumentBox').length > 6){ atwWrapper.find('.js-slider-next').fadeIn(600); } } function atwMoveRight() { atwWrapper.find('.js-slider-prev').fadeIn(150); $(".slider > :visible:first").hide(150) $(".slider > :visible:last").next().show(150); if(!$(".slider > :visible:last").next().find('.name')()){ atwWrapper.find('.js-slider-next').fadeOut(150); return; } } function atwMoveLeft() { atwWrapper.find('.js-slider-next').fadeIn(150); $(".slider > :visible:last").hide(150); $(".slider > :visible:first").prev().show(150); if(!$(".slider > :visible:first").prev().find('.name')()){ atwWrapper.find('.js-slider-prev').fadeOut(150); return; } } initATWSlider(); //update star icon on adding/removing instrument to/from specific watchlist atwWrapper.on('click', 'label.addRow', function() { let parent = $(this).parent(); let checkedPortfolio = false; parent.find('input[type=checkbox]').each(function () { if($(this).is(':checked')){ checkedPortfolio = true; } }); let closestStar = $(this).closest('.addToPortWrapper').find('.star'); if(checkedPortfolio){ closestStar.addClass('added'); }else{ closestStar.removeClass('added'); } }); //update star icon on creating new watchlist atwWrapper.find('.js-create-watchlist-portfolio').find('a.js-create').on('click',function () { let parent = $(this).parent(); let watchlistName = parent.find('input[type=text]').val(); if(!watchlistName){ return; } let star = $(this).closest('.addToPortWrapper').find('.star'); star.addClass('added'); }); //update star icon on adding new position atwWrapper.find('.js-create-holdings-portfolio').find('.js-submit').on('click',function () { let addPositionForm = $(this).closest('.addToPortfolioPop').find('.holdingsContent'); let amount = addPositionForm.find('.js-amount').val(); if(amount < 1){ return; } let star = $(this).closest('.addToPortWrapper').find('.star'); star.addClass('added'); }); atwWrapper.find('.instrumentBox').find('.shortInfo').on('click',function () { if(!window.ga){ return; } let pairId = $(this).parent().find('.js-add-to-portfolio').attr('data-pair-id'); let pairType = window.atwPairTypes[pairId]; window.ga('allSitesTracker.send', 'event', 'content', 'symbol link clicked', '', { "dimension147":"symbol_link_clicked", "dimension163":"click", "dimension148":"symbol", "dimension162":"content add to watchlist", "dimension161":"article page", "dimension142":"article", "dimension75":pairType, "dimension138":pairId, "dimension118":"2968701" }); window.open($(this).attr('data-href')); }); window.atwPairTypes = {"1058142":"currency","1167226":"currency"};

• Ankr revealed that a former team member placed malicious code in their programs, leading to aBNBc exploits.
• Earlier, Ankr suffered a $5 million exploitation on its platform.
• The exploiter dumped 20 trillion aBNBc on PancakeSwap and later exchanged the funds on other platforms.
• Ankr claimed to have begun working with law enforcement to prosecute the former team member.
• The firm promised to tighten its internal HR procedures and safety measures to make its network more secure.

Web3 infrastructure provider Ankr has provided insight into the circumstance that led to exploiting its aBNBc tokens.

The protocol revealed in a recent blog post that it had identified a former team member as an architect of the security breach as he placed malicious code in their programs.

"A former team member (who is no longer with Ankr) acted maliciously to conduct a supply chain attack, inserting a malicious code package that was able to compromise our private key once a legitimate update was made," Ankr said. Recall that in early December, the BNB Chain-based decentralized finance protocol suffered a $5 million exploitation on its network. Blockchain security firm, Peckshield first raised the alarm of the exploitation.

The exploiter minted 20 trillion Ankr reward-bearing staked BNB (aBNBc). Later, in a Twitter post, Lookonchain, an on-chain analysis firm, confirmed the exploitation, maintaining that the exploiter dumped the minted 20 trillion aBNBc on PancakeSwap. Afterward, the exploiter reportedly exchanged the funds for more than $5 million worth of USD coins on Uniswap, Tornado Cash, and others.

The Ankr team has been investigating the incident, which led it to its former team member.

Ankr Working With Security Agents to Prosecute ex-team Member

The protocol further stated that it has started working with law enforcement to prosecute the former team member. More so, Ankr promised to shore up its internal HR processes and safety measures to strengthen the network’s security. As part of its security plans, the firm has committed to working on the following aspects:

• Integrating multisig authentication and timelocks for updates
• Enhancing internal security measures
• Implementing a new monitoring and notification system
• Refinement of DeFi protocol working procedures

Ankr said it had taken several measures to minimize the effect of the exploitation on its users. According to the protocol, it used an Advanced API Tool to locate every aBNBc token holder in 10 seconds and has determined a reimbursement plan for them. According to reports, Ankr airdropped BNB tokens to affected users on Dec. 2.

On the Flipside

• Although Ankr has made some good statements lately regarding the stability of its ecosystem, its token Ankr dipped in value. At press time, Ankr is trading at $0.0175, down from its seven-day peak of 0.0212.

Why You Should Care

Blockchain security firm Beosin suggested the exploit was likely due to vulnerabilities in the smart contract code. In addition, the Ankr team might have compromised private keys through a technical upgrade about 12 hours ago. However, recent statements from Ankr have cleared some doubts.

You may also like:

Web3 Infrastructure Platform Ankr Suffers $5 Million Exploitation, Binance Moves to Help

Ankr Partners With Ssv.network For More Secure Ethereum (ETH) Liquid Staking

See original on DailyCoin