Clipper

Security

<ul class="wp-block-list">
 <li>The Clipper hack was caused by a withdrawal function vulnerability, not a private key leak.</li>  
 <li>The $450,000 hack exploited liquidity pools, affecting 6% of Clipper's total value locked.</li>  
 <li>Clipper has paused swaps and deposits, focusing on recovering stolen funds and investigating.</li> 
</ul>  
<p>Clipper, a decentralized exchange (DEX), has <a href="https://x.com/AltCoinsProf/status/1863459472301326345" rel="noopener noreferrer nofollow">reported</a> a $450,000 hack on December 1 due to a withdrawal vulnerability. The attack targeted two liquidity pools, affecting 6% of the platform’s total value locked. Clipper stated that the exploit had ended and no other pools were affected.</p>  
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  https://twitter.com/AltCoinsProf/status/1863459472301326345
 </div>
</figure>  
<p>The vulnerability involved the ability to withdraw using one token in a combined swap-and-withdrawal transaction. Clipper has now disabled this feature to prevent future exploitation.</p>  
<h2 class="wp-block-heading" id="h-clipper-denies-private-key-leak-allegations"><strong>Clipper Denies Private Key Leak Allegations</strong></h2>  
<p>Clipper has rejected allegations of a private key leak causing the exploit. These claims surfaced after Chaofan Shou, co-founder of Fuzzland, made the accusation. Shou claimed an API vulnerability might have allowed unauthorized deposit and withdrawal approvals.</p>  
<p>Moreover, Clipper has clarified that its security architecture prevents private key leaks. The exchange emphasized that the issue originated from the withdrawal function, not compromised keys.</p>  
<h2 class="wp-block-heading" id="h-exchange-adjusts-operations"><strong>Exchange Adjusts Operations</strong></h2>  
<p>Clipper paused swaps and deposits to enhance security while the investigation continues. However, users can still withdraw funds if they withdraw proportional mixes of assets. Clipper reassured users that this action eliminates any further exploitation risks.</p>  
<p>The team confirmed it is tracking the stolen funds and investigating recovery <a href="https://cryptonewsland.com/crypto-heists-explained-how-to-avoid-crypto-hacks/" rel="noopener noreferrer nofollow">options</a>. Clipper has invited the hacker to reach out for discussions about resolving the matter.</p>  
<h2 class="wp-block-heading" id="h-crypto-hacks-highlight-ongoing-security-challenges"><strong>Crypto Hacks Highlight Ongoing Security Challenges</strong></h2>  
<p>The Clipper hack<a href="https://cryptonewsland.com/defi-protocols-targeted-in-majority-of-november-2024/" rel="noopener noreferrer nofollow"> contributes</a> to the $1.48 billion stolen from crypto platforms in 2024. This figure marks a 15% decrease compared to the same period in 2023. Clipper said it remains committed to strengthening security and ensuring the protection of user funds.</p>  
<p>Clipper continues to investigate the breach and promised to provide updates to affected users. Shipyard Software, the company behind Clipper, has not commented further on the incident. The exchange remains focused on improving its security measures and regaining user trust.</p> 
<p>The post <a href="https://cryptonewsland.com/clipper-exchange-hit-by-450000-hack-due-to-withdrawal/" rel="noopener noreferrer nofollow">Clipper Exchange Hit by $450,000 Hack Due to Withdrawal Function Vulnerability</a> appeared first on <a href="https://cryptonewsland.com" rel="noopener noreferrer nofollow">Crypto News Land</a>.</p>

Clipper Exchange Hit by $450,000 Hack Due to Withdrawal Function Vulnerability

Table of Contents

Crypto News Land

Other articles published on Dec 2, 2024

Breaking: MARA Holdings Announces Raising $805M More To Buy BTC

Top Altcoins to Watch for Bullish Breakouts Beyond Crypto Cash Rotation

Avalanche Surges as Talks Begin with Trump Administration

WisdomTree Files for XRP-Based ETF Following Strong Market Performance

Arbitrum DeFi Protocol Thala Labs Recovers $25M After Exploit on Nov. 15

XLM Leads the Way: Stellar and USDC Power Faster Remittances for U.S. Latinos

Join our free newsletter for daily crypto updates!