Issuance platform Seedify attacked by hacker address linked to North Korea

Techub News: Issuance platform Seedify posted on X, stating, "Yesterday at approximately 20:05 Hong Kong time, a North Korea-related group known for multiple Web3 hacks obtained a developer's private key. Using this access, they minted a large number of SFUND tokens through a previously audited cross-chain bridge contract. As a result of the incident, the OFT contract was compromised, allowing the attacker to modify contract settings and mint unauthorized tokens on Avalanche.

By design, the contract should not have completed the minting process without any cross-chain token transfers. The attacker then bridged these tokens to Ethereum, Arbitrum, and Base, drained the available liquidity pools on these chains, and ultimately bridged as many tokens as possible to BNB, completing the sell-off before we could contain the situation. Currently, liquidity on BNB Chain is no longer at continuous risk, and we have suspended all cross-chain bridges. However, we advise against purchasing the token on other chains until further notice.

Upon discovering the issue, we immediately coordinated with centralized exchanges to halt trading, blacklisted the attacker's address on multiple chains, and revoked the compromised permissions. Additionally, cross-chain bridge functionality has been temporarily disabled. It is important to note that this incident was limited to the minting permissions of a compromised wallet. Core contracts, user wallets, the website, and the underlying protocol were not affected."