Hacker destroyed $1 million in stolen cryptocurrency
An attacker attacked the Zeed DeFi protocol but did not withdraw funds from an “attack” smart contract
22.04.2022 - 10:45
614
2 min
0
What’s new? A hacker attacked the Zeed DeFi protocol and withdrew $1,04 million in BSC-USD Binance-Peg (BUSDT) tokens, according to cybersecurity firm BlockSec. However, the attacker did not transfer the funds from an “attack” smart contract, which was set to self-destruct. All the stolen cryptocurrency was destroyed before the hack was even detected.
Details of the hack. The hacker exploited a vulnerability in the reward distribution protocol, allowing him to issue additional tokens. The attacker then sold them, collapsing the price of the native token of Zeed (YEED) to zero, and earned more than $1 million.
Analytics firm PeckShield noted that the stolen cryptocurrency was transferred to an “attack contract,” a smart contract that automatically executes an exploit. However, the hacker did not withdraw the funds from the address before setting it to self-destruct, and the coins were permanently stuck in the contract. On April 21, at 7:15 UTC the contract was destroyed.
What had happened before? On April 17, Beanstalk Farms, a DeFi-protocol, was hacked, causing the platform to lose $80 million. Following the hacker attack, the network’s native token collapsed by 86%. The developers of the MetaMask crypto wallet also warned of possible phishing attacks on Apple iCloud. They advised disabling data backup for their app.
Useful material?
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Incidents
According to Blockaid, the attack may have been carried out by the same hacker behind the 1inch Fusion V1 exploit.
May 7, 2026
Incidents
The attacker gained administrative access and altered contracts to drain user funds
Apr 30, 2026
Telegram
Twitter