Key Takeaways
- HoneySwap’s FrontEnd was hacked, which has caused transactions to lead to a malicious address. HoneySwap Team identified this problem on May 10th, 2022.
Below is a quick overview of this project.
Honeyswap is a Multichain DEX and Liquidity Aggregator built by 1hiveorg Bees. It is currently supporting Gnosis Chain and Polygon.
How did the Attack occur?
Honeyswap domain was hijacked. Honeyswap Team, at the time of the Attack, advised users who used the platform in the past two days to not trade on the platform. This means that the platform was unaware of the hack for 48 hours. HoneySwap Team has advised its users to go to https://revoke.cash and make sure that they have no approvals to an address they do not know. Below is the screenshot of the affected code-shared by blanker.eth. Here is the link to the address to which funds were transferred:
https://etherscan.io/address/0xD3888a7E6D6A05c6b031F05DdAF3D3dCaB92FC5B
What was the Team’s Response to the Attack?
On May 11th, 2022, HoneySwap Team has announced that they have recovered the https://honeyswap.org/ domain. The team has also advised everyone to clear their cache and check if they see the quote from Marcus Aurelius, as shown in the screenshot below.
They have created a proposal to reimburse those who lost their funds due to this, and the total funds lost are less than 20K$, so it was not a problem for the team to support this proposal on their GardensDAO governance platform.
Everyone who has lost anything during the hijack of the Honeyswap domain and check their wallets on the Gnosis chain. Here is the link to reimbursement transactions:
- https://blockscout.com/poa/xdai/tx/0x05924b04b77a5c628cd3e1d60e66fe8a39af14ef273d7b2368d56f3716baf817
- https://blockscout.com/poa/xdai/tx/0xac1a1ba252b675ff71227f34f5feefc325aca6dfe61439c7f850f5fd1460090d
As crypto hacks are increasing nowadays, our readers should stay alert.
