GuShiio.com has learned that Safe{Wallet} recently issued an article disclosing the progress of the investigation into the February 21 security incident in cooperation with Mandiant. The FBI determined that the more than $1.4 billion hack was carried out by a North Korean affiliated gang TraderTraitor (UNC4899). The attacker circumvented multiple authentications by hacking into developer notebooks and hijacking AWS session tokens. Mandiant’s preliminary report showed that despite Safe’s strict security measures, attackers broke through the line of defense and investigated gaps caused by the removal of malware. Safe smart contracts have not been affected, infrastructure has been reset, detection has been strengthened, and hardware wallet signature support has been suspended. The team called on the Web3 industry to improve transaction verification UX, strengthen collective defense, and launch the verification tool Safe Utils. The full report and network recovery details are yet to be announced.
read the original