DForce official: hack incident truth restoration

Original post by: dForce official

On April 19, Beijing time, dForce's decentralized lending agreement lendf.me was hacked, worth about $25 millionEncrypted digital assets were stolen by hackers. For 48 hours after the incident, we worked around the clock to track down the hackers and the hackersThe whereabouts of the stolen assets.

Review of attacks:

· at 8:58 on April 19, hackers began to attack the contract of lendf.me.

· by 11:32, the hackers had completed the attack and stolen $25 million worth of encrypted digital assets.

· at 12:57 p.m., the lendf.me and USDx contracts were closed.

Team action review:

& have spent · from 11:00 to 14:00 on April 19th, our investors (Multicoin Capital, CMBI, firecoin Capital) helped us to urgently contact the major stable currency asset issuers and the decentralized financial agreement team. At the same time, we contacted the senior management of partners such as the major centralized exchanges and wallet, and asked for the hacker's address and relevant accounts involved in the case to be included in the monitoring and freezing of stolen assets.

· since 12 o 'clock on April 19, we have reported the cause and effect of the attack to the major asset issuers and the decentralized financial agreement
As the assets are at the moment, we have been asked to issue an enforcement letter from the police for further action.

· on the afternoon of April 19, dForce, spark and imToken security teams gathered offline, and set up a temporary security team with slow fog remote connection to start the asset recovery.

· at 22:12 on April 19, a message "Better Future" was left on the hacker chain.

· at 22:16 on April 19, the hacker transferred 126,014 PAX to the lendf.me Admin address.

· at 22:43 on April 19, we left our contact information to the hackers on the chain and expressed our willingness to communicate.

· at 22:53 on April 19, we formally requested the Singapore police to cooperate with us in issuing an enforcement letter, so as to obtain the assistance of major asset issuers and decentralized financial agreement teams to monitor and freeze the accounts of hackers

· at 3:04 on April 20, hackers transferred 320.277 HBTCS to the lendf.me Admin address.

· at 3:20 on April 20, the hacker transferred 381,162 HUSD to the lendf.me Admin address.

· since the morning of April 20, the Singapore police successively provided enforcement letters to other teams, requesting the teams to directly provide the necessary information related to the case to the police or to monitor and freeze the relevant accounts. The communication process between the police and various third-party teams never passed through the dForce team, and the dForce team never obtained the IP information provided by 1inch to the Singapore police.

· on April 20, based on the traces left by the hackers before and after the attack, the security team successfully determined the accurate portrait of the hackers, and began to cross-compare with various resources at home and abroad to obtain breakthrough clues and get closer and closer to the hackers.

· during the day of April 20, there was no action by the hackers. At 18:17 p.m., lendf.me Admin left a message on the chain saying "Contact us. For your better future."

· at 13:33 on April 21, under heavy pressure, the hacker took the initiative to communicate with us and began to return part of the assets. After continued communication, all assets were successfully recovered.

· as of 17:00 on April 21, the Singapore police had not found the hacker's real person information. As the assets have been recovered, we have submitted a request to the police to withdraw the case.

We solemnly declare that the dForce team has not received any sensitive user information provided to us by the cooperation.

The dForce team would like to thank our partners, users and investors for their support and assistance.

Welcome to join the official BlockBeats community:

Telegram Subscription Group: https://t.me/theblockbeats

Telegram Discussion Group: https://t.me/BlockBeats_App

Official Twitter Account: https://twitter.com/BlockBeatsAsia