Cryptocurrencies

DeFi Platform BadgerDAO Says Cloudflare Flaw Led to $130 Million Heist

  • Incident comes amid increase in crimes against DeFi platforms
  • More than $9 million of stolen funds recoverable: BadgerDAO
Lock
This article is for subscribers only.

Decentralized finance platform BadgerDAO said a flaw in the account creation process of the software company Cloudflare Inc. led to the theft of $130 million in cryptocurrencies earlier this month.

BadgerDAO detailed how the hack took place in a blog post on Thursday, saying a phishing attack that occurred on Dec. 2 was a result of “maliciously injected snippet provided” by Cloudflare Workers, a serverless application platform that runs on its cloud network. The post, which was prepared by BadgerDAO and cybersecurity firm Mandiant Corp., said the Cloudflare flaw had been since been remediated.