All Activity
- Past hour
-
#Venus #PhishingAttack #Crypto In September 2025, the Venus Protocol phishing incident ignited an industry-wide debate: a wallet worth 13 million USD was drained, the protocol team urgently halted all functionality, and within 12 hours pulled off an unprecedented “rescue operation.” This wasn’t just another phishing attack — it exposed a deeper contradiction: can a decentralized protocol have it both ways? Can it uphold “code is law,” yet still “extend a helping hand” in a crisis? This article reconstructs the drama end to end — from the attack vector to the protocol’s response, and the governance questions underneath — to unpack the full story behind the Venus phishing incident. A Full Replay of the Venus Phishing Incident A. An Apparently Ordinary Phish: Six Seconds to Ruin Back to 09:05 UTC on September 2, 2025. A Venus Protocol whale (Sun Kuan, founder of Eureka Crypto) opened the Zoom client, ready for routine DeFi operations. No one expected this meeting to spark a 13 million USD vaporization. The hacker didn’t try to crack a private key or smash a protocol bug. Instead, by tampering with the Zoom client and forging a browser extension, they led the victim to believe they were performing an ordinary approval signature. At the moment of signing, the attacker obtained delegated control over the wallet. From click to liquidation: just six seconds. For DeFi users, this is chilling. Almost everyone has signed similar approvals — often faster than reading the terms of service. Faced with a long-prepared social-engineering trap, every defense can collapse instantly. B. The Attack Flow: A “Flash-Loan Murder Mystery” Once the compromised wallet was under control, the hacker executed a textbook DeFi attack sequence: Flash loan ignition: Borrowed 285.72 BTCB with no collateral, instantly commanding tens of millions in liquidity. Repay & transfer: First repaid the victim’s debts, then, leveraging the granted approvals, transferred out all assets, including vUSDT, vUSDC, and BTCB. Re-collateralization: Used the stolen assets as collateral to borrow 7.14 million USD in USDC from Venus — effectively forcing the victim to pay the hacker’s “ransom.” Flash-loan repayment: Closed the loop by repaying the flash loan with the stolen funds — getting something for nothing while shunting the risk to the victim’s wallet. In under a minute, 13 million USD was siphoned out — like a well-rehearsed script. C. Protocol Response: From the Nuclear Option to a Flash Vote Typically, this is where such attacks end: the victim laments, the hacker vanishes, the community snarks for a few days, and life goes on. Not this time. At 09:09, security firms Hexagate and Hypernative fired the first alerts. Venus quickly confirmed the problem and, within 20 minutes, hit the emergency brake — a full protocol pause: Borrowing halted Liquidations suspended Withdrawals frozen The entire DeFi protocol entered standstill mode. This was unprecedented: to save one user, the entire ecosystem shut down. Next, Venus initiated a so-called flash vote. The proposal was blunt: Partially restore functionality to avoid spillover liquidations Force-liquidate the attacker’s positions and seize collateral Conduct a full security review Ultimately restore the protocol Community voting result? 100% in favor. The number recalls the “perfect elections” of authoritarian states. Consensus — or resignation? No one can say for sure. D. Counterstrike: The Hacker’s “Grave of His Own Making” With the vote passed, Venus moved immediately. Out of greed, the hacker left stolen assets as collateral inside the protocol. Those very collateral positions became his death trap. At 21:36 UTC, Venus executed liquidations, forcibly seizing the attacker’s positions. In under 12 hours, the “perfect playbook” turned into a “suicide script.” Funds were recovered, the protocol restored — but at the cost of shaking trust in decentralization across the industry. E. The Victim and the Hand Behind the Curtain Victim Sun Kuan later acknowledged: this was a long-planned phishing campaign. The attacker impersonated an industry acquaintance and used a tampered Zoom client and Chrome extension to induce an unsuspecting approval. Multiple analyses suggest the Lazarus Group, a North Korean hacking outfit, may be behind the attack. They have a long record in crypto, adept at social engineering and patient staging. It means that even seasoned players can be defenseless against a nation-state adversary. Decentralization’s Dilemma: Save People or Obey the Law? 1. Venus’s actions sparked intense controversy. “Code is law” has long been DeFi’s golden rule: once a smart contract is deployed, no one should have the power to change or interfere. It stands for extreme transparency and certainty — rules on-chain, equal for all, no exceptions. But in this case, Venus intervened — triggering the emergency pause and even force-liquidating the hacker’s positions via governance. While this effectively clawed back losses, it forces a rethink: how “decentralized” is a decentralized protocol? From a user’s standpoint, the intervention is almost beyond reproach. Leaving a 13 million USD loss unaddressed isn’t just a personal nightmare — it can spark panic selling. Venus’s “emergency brake” was like pulling the fire alarm in a burning building, preventing spread. For most users, fund safety trumps the abstract principle of decentralization. From decentralization’s standpoint, though, this breaks the myth. An emergency switch admits there are visible hands behind the protocol — capable of freezing markets, changing rules, and deciding outcomes. How different is that from TradFi’s “lender of last resort”? In a sense, Venus became a quasi-bank beneath a decentralized veneer. 2. More troubling: who decides when to invoke emergency powers? If it’s for hackers, everyone applauds; but if, in future, it targets an “non-compliant wallet” or a “politically sensitive transaction,” could the same rationale apply? Once the precedent is set, decentralization’s boundary blurs. This is a paradox the entire DeFi space can’t avoid: Ideal: all power to code — even if user error destroys funds, no human intervention. Reality: users want a safety net — someone to help when the unexpected hits. This debate isn’t new. In 2020’s MakerDAO black swan, to stabilize DAI the community had to rush in auction mechanics; In 2022’s Solana outages, validators coordinated restarts to keep the system alive; In 2016’s The DAO hack, Ethereum hard-forked to roll back transactions and save the ecosystem. These cases show that when interest collides with ideology, the blockchain world often oscillates between purity and pragmatism. So when someone asks, “If DeFi still relies on human intervention, how is it different from a bank?” — the answer may not be binary. The difference may be: TradFi rules are typically set by a few institutions; users passively accept. DeFi interventions at least require open, on-chain governance votes — decisions are transparent and auditable. This is the subtle, fragile boundary between DeFi and TradFi: DeFi seeks to retain a decentralization ethos, yet admits that in extremes, a human hand may be needed. Venus simply surfaced the problem early. Conclusion From the 09:05 click to the 21:58 restoration, the Venus phishing incident looks like a “successful rescue,” but it leaves bigger questions: Can a decentralized protocol be truly decentralized? Are emergency powers a safety net or a centralization shackle? Faced with real-world risk, must ideals ultimately compromise? Perhaps that’s the most memorable part of this episode: hackers can steal assets, but what may truly be stolen is people’s faith in decentralization.
- Today
-
At GTHost, we believe in creating a service and environment that supports openness and complete transparency. Our dedicated instant servers are available in as little as 5 to 15 minutes of your payment. We offer comprehensive options for Dedicated Instant Servers throughout the U.S., Canada, Middle East and Europe. Our Looking Glass portal supports our mission of transparency by allowing you to easily check the connectivity of GTHost network and also to perform several key tests including ping and trace. Locations: 20 - Instant Dedicated Servers: 2,000+. Unmetered and guaranteed bandwidth from 300Mbps to 10Gbps. No setup fees. Month to month. Linux Auto-Deploy. Delivery in 15 mins 24/7. Low-cost trial starting at $5/day. Instant Dedicated Servers 24/7 in Ashburn, Atlanta, Chicago, Dallas, Detroit, Denver, Los Angeles, New York, Miami, Santa Clara, Seattle, Montreal, Toronto, Vancouver, Amsterdam, Frankfurt, Madrid, London, Paris (Supermicro Blade Servers). We have the best coverage in North America!. New Low Prices!!! E3-1260Lv5, 16GB DDR4, 480GB SSD, 300M Unmetered, starting at $59 E3-1260Lv5, 16GB DDR4, 480GB SSD, 500M Unmetered starting at $84 E3-1260Lv5, 16GB DDR4, 480GB SSD, 1000M Unmetered starting at $109 E3-1260Lv5, 16GB DDR4, 2x480GB SSD, 300M Unmetered - Price $64 E3-1265Lv3, 32GB DDR4, 2x480GB SSD, 300M Unmetered - Price $64 E5-2650v2, 64GB, 2x480GB SSD, 300M Unmetered starting at $79 E5-2650v2, 64GB, 2x480GB SSD, 500M Unmetered starting at $99 E5-2650v2, 64GB, 2x480GB SSD, 1000M Unmetered starting at $124 E5-2695v2, 128GB, 2x480GB SSD, 300M Unmetered starting at $99 E5-2695v3, 64GB, 2x480GB SSD, 300M Unmetered starting at $99 2xE5-2650v2, 256GB, 2x480GB SSD, 500M Unmetered starting at $149 2xE5-2650v2, 256GB, 2x960GB SSD, 500M Unmetered starting at $169 2xE5-2695v2, 128GB, 2x960GB SSD, 500M Unmetered starting at $169 2xE5-2695v2, 512GB, 2x960GB SSD, 1G Unmetered starting at $289 2xE5-2695v3, 128GB, 2x960GB SSD, 500M Unmetered starting at $199 2xE5-2695v3, 256GB, 2x960GB SSD, 500M Unmetered starting at $249 1xE5-2695v4, 64GB, 2x960GB SSD, 500M Unmetered starting at $129 1xE5-2695v4, 128GB, 2x960GB SSD, 500M Unmetered starting at $159 2xE5-2695v4, 128GB, 2x960B SSD, 1000M Unmetered starting at $249 2xE5-2695v4, 256GB, 2x960B SSD, 1000M Unmetered starting at $299 2xE5-2695v3, 512GB, 2x960GB SSD, 1000M Unmetered starting at $379 For more information visit: Instant Dedicated Servers https://gthost.com/instant-servers/ You can change bandwidth at any time 24/7. Bandwidth upgrade 300M +$20 = 500M Bandwidth upgrade 500M +$30 = 1000M Xeon E5 2G Unmeterd starting at $169 Xeon E5 10G Unmeterd starting at $798 https://gthost.com/10gbps-dedicated-servers/ E5-2640v3, 32GB, 2x480GB SSD, IPMI, 2G Unmetered starting at $169 E5-2695v3, 64GB, 2x480GB SSD, IPMI, 2G Unmetered starting at $199 2xE5-2650v2, 128GB, 2x960GB SSD, IPMI, 2G Unmetered starting at $239 3Gbit/s +89/mo 4Gbit/s +179/mo 5Gbit/s +269/mo 6Gbit/s +359/mo 7Gbit/s +449/mo 10Gbit/s +629/mo Storage servers https://gthost.com/storage-dedicated-servers/ Don't see what you're looking for? Please contact us. 1-10 Days Trial of started from $5/day How to Get a Dedicated Server in 15 mins 24/7 (Video review) - https://www.youtube.com/watch?v=VkMth_to6uE OUR INSTANT SERVERS ADVANTAGES: - Servers ready in 5-15 minutes after payment 24/7 - Clear Specs - know what you are getting - 1-10 days trial for as low as $5/day - 2 Factor Authentication - 100% Owned Equipment - Automatic Installation of Linux OS All servers come with IPMI No long term contracts, No setup fees, Month to Month All Our Instant Dedicated Servers https://gthost.com/instant-servers/ Real-time listing OUR NETWORK ADVANTAGES: - Premium low latency 100GE Network Infrastructure - Our own AS and IP addresses - IPv6 prefix available upon request - Selected premium Tier-1 bandwidth providers - Automatic rDNS configuration - Unmetered (guaranteed) Bandwidth from 300Mbit/s to 10Gbit/s - Looking Glass, Live network graphs - Two-Factor Authentication - Sub-accounts with different roles Please look at our looking glass: https://gthost.com/looking-glass/ (ping, traceroute, mtr) ★★★★★★ Asia Optimized Network ★★★★★★ Atlanta: 167.88.63.166 Ashburn: 142.202.49.166 Chicago: 162.251.60.175 Dallas: 167.88.62.166 Denver 139.64.164.166 Los Angeles: 162.251.63.175 New York: 38.99.247.166 Miami: 162.251.62.176 Santa Clara: 167.88.60.166 Seattle: 38.91.102.166 Montreal: 158.51.120.166 Toronto: 198.57.26.172 Vancouver: 158.51.122.166 Amsterdam: 139.64.166.166 Frankfurt: 193.108.116.176 London: 142.202.51.166 Paris: 139.64.167.166 Supermicro Blade Servers, Enterprise SSD and HDD, Linux Auto-Deploy, Fully Redundant Power Feeds (A+B), Free IPMI. If you have questions, feel free to Contact US.
-
Managed Cloud VPS @ Veeble Hosting -------------------------------------------------------------------------------------------------------------------------------------- Veeble Hosting has been providing a wide range of web services since 2009, including Virtual Private Servers, dedicated servers, remote desktop solutions, and web hosting. We are committed to creating a reliable and closely connected web environment, utilizing the latest cutting-edge technology. Our affordable 24x7 managed services ensure seamless and worry-free hosting for your peace of mind. Every Cloud VPS Includes: Enterprise HighOPs SSDUpto 10 Gbps bandwidthCentOS, Almalinux, Ubuntu, Debian, Rockylinux, Windows Operating SystemsOne Click Operating System Installation.Full Root/Administrator Access & ControlSmart Control Panel with Shutdown, Boot, Reboot, Re-install.Instant SetupNo Setup Fees & other hidden chargesUS/UK/EU/Singapore/Helsinki/Australia/Sweden located serversSnapshot Backups99.99% Uptime Guaranteed Global Cloud Packages: Linux Cloud Packages Starting from $19.5 per month =10&configoption[1863]=1&configoption[1864]=1]Configure & Order Now Windows Cloud Packages Starting from $33.5 per month =20&configoption[1870]=1&configoption[1871]=1]Configure & Order Now -------------------------------------------------------------------------------- Offers raining down on all VPS plans - Click here to learn more! -------------------------------------------------------------------------------- We accept the following payment methods: PayPalSkrillAll Major International Credit CardsPayeerBitcoin, Ethereum, Litecoin, Ripple, Tether, DogecoinAll Indian Credit/Debit cards and NetbankingWebmoneyPaysafecardAlipayTenpayQIWILocal Bank transfer in US, UKSEPA TransferWire/Swift Transfer Know more about the payment methods here - https://www.veeble.com/how-to-pay ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Our Support We tirelessly work around the clock to ensure top notch support and a wonderful customer experience. You can contact us through Email/tickets (24x7)Live Chat (24x7) ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ Connect with us through social networks Twitter: www.twitter.com/veeble Facebook: www.facebook.com/veeble LinkedIn: www.linkedin.com/company/veeble Instagram: www.instagram.com/veeble_hosting If you have any questions please log on to http://www.veeble.com/support
-
🎉 <a href="https://croxy.com/">CROXY</a>: Freedom, Stability & Speed — Redefined! Break through geo-restrictions effortlessly with millions of real residential IPs worldwide — enjoy lightning-fast speeds and seamless access! ✨ Why Choose Croxy? ✅ 99.9% Uptime — Reliable & uninterrupted ✅ Ultra-Low Latency — Smooth performance ✅ Anonymity & Security — Browse with confidence 💼 Perfect For: • Social Media Management • Data Scraping • E-Commerce Shipping 🎁 Exclusive Offer: Get 20% OFF your first order! Enterprise-grade quality at budget-friendly prices. 🌍 Today, discover Croxy — Where the internet knows no boundaries! 👏 https://croxy.com/
-
CroxyProxy joined the community
- Yesterday
-
Digierra Institute joined the community
-
MonetizeBetter would like to wish all members celebrating their birthday today a happy birthday: JamesBradley (35)Klelala597 (31)Wen Qin (30)manrojpe (47)Anisur Rahman (42),
-
TeleLoopPulse joined the community
-
Why pay more? Snag 50% OFF VPS Hosting today!
Nicole replied to Nicole's topic in Hosting & Domain Providers
OwnWebServers is offering a 50% discount on their Forex VPS hosting plans. This is a good deal if you're looking for a reliable and secure virtual private server to run your forex trading applications. Use the code VPS50 at checkout to redeem the discount. -
willamstock1122 joined the community
- Last week
-
Custom Configuration dedicated server?
VIKHOST replied to Boomlaka's topic in Hosting & Domain Providers
Yes, that kind of setup is possible as a custom configuration. Vikhost.com offers dedicated servers with flexible hardware options, so you can request SSD + HDD combinations, high RAM, and unmetered bandwidth directly. -
Emorinil joined the community
-
Selling Gmail USA IP | Gmail MIX IP | Outlook Old accounts
BURZH replied to BURZH's topic in Social Media Services
➕ New position available ▪️ Inbox.lv I TRUST I IMAP I SMTP ▪️ GitHub I TRUST I BEST QUALITY ▪️ Fiverr.com I TRUST I AVATAR TG bot: https://t.me/Raccoonstockbot Channel: https://t.me/RaccoonStock Contact: https://t.me/changreta -
🔥 Always available popular mails gmail, hotmail, outlook and gmx. Update ⭐ Removed unnecessary functionality that only misled users and was almost never used. ⭐ New mail domains have been added: int.pl, t-online.de, gazeta.pl and others. ⭐ Removed custom mail domains. Prxoy 🔥 We have proxies with payment for traffic. You can set up the rotation type, protocol and country. Proxies without a link to change IP. The price for 1 GB depends on the pool: Data center - 1 USD per 1 GB Residential - 2 USD per 1 GB Mobile - 3 USD per 1 GB Coupons 🔥 You can buy refill coupons on XMart. This is advantageous, because, for example, a coupon for 10 USD costs only 8 USD, so you can save 20% when refilling. More details on the coupon use page -https://quix.email/coupon 💎 Website - https://quix.email
-
proxyshare ada joined the community
-
MonetizeBetter would like to wish all members celebrating their birthday today a happy birthday: Mark Mone (30)daimmalik (28)Breed (34)airborneprivatejet (32)NickFould (56)miajacob (20),
-
Hey everyone, I wanted to share a quick experience I had while managing multiple ad accounts for different regional campaigns. Like many here, I often faced IP-related blocks and frustrating delays. Then I tried FlyProxy. Their vast pool of real residential IPs and smart IP rotation helped me avoid detection and maintain steady, secure connections. The setup was straightforward, and I didn’t have to worry about frequent disconnections or slow speeds during critical tasks. If you’re looking for a reliable proxy solution that just works, maybe give FlyProxy a look. Have you had similar experiences with proxies? What do you prioritize in a provider? Cheers!
-
Flyproxy_july joined the community
-
Premium Proxy Solutions Since 2019
Unknown Proxies replied to Unknown Proxies's topic in Proxy Providers
-
AffiliatePress is the newest affiliate plugin for WordPress and WooCommerce to start an affiliate program. Use our discount code for the AffiliatePress plugin to save on your purchase. About Affiliate Press Plugin The creators of this plugin are Repute Infosystems, which is well known in the WordPress space. They are a great team that manages a couple of other successful plugins like BookingPress, ARMember, and ARForms. The company launched AffiliatePress to help you create and manage a professional affiliate Program. You will get a wide range of features and integrations. Also, it is made following the best coding standards, which means the conflicts with other plugins or themes are minimal. Discounted Pricing Plans You can choose from four pricing plans for AffiliatePress, each differing in terms of features and the number of sites allowed. Free – It works fully with WooCommerce and 22 other integrations. Also, it comes with unlimited affiliates, commissions, payouts, smart admin and user panel, manual payouts, and default sidewide commissions. Standard: $69/year/1 site OR $169/lifetime – This plan includes all the features of the free plan, plus a setup wizard, advanced reporting, fraud protection, PayPal payouts, user-specific rates, product-wise commissions, product selections, performance metrics, and a signup bonus. Professional: $119/year/3 sites OR $229/lifetime – This plan costs $99 per year and includes up to 3 installations. It also comes with all features of Standard, plus an affiliates’ landing page, coupon code, Stripe payout options, MLM commissions, tiered-commission rates, and recurring commissions. Enterprise: $249/year/10 sites OR $599/lifetime – It includes all features of the Professional plan and allows installation on up to 10 domains. Affiliate Press Discount Code There is no need to enter any discount code to unlock the 30% prices. -> Get AffilitePress with a 30% discount Money Back Guarantee Regardless of what type of affiliate program you intend to launch, AffiliatePress is a good fit. Thanks to their 14-day money-back guarantee, you can install it, configure it, and launch risk-free. If you need help configuring it, please let me know, and I will be happy to assist you.
-
Would you like to grow the sales of your WordPress website by running your own affiliate program? Then read my review of AffiliatePress to understand how you can create, manage, and optimize a full-featured affiliate program directly from your WordPress dashboard. ✅ AffiliatePress Review TLDR The AffiliatePress plugin for WordPress helps website owners create and manage their own affiliate programs. It has all the features of the main competitors, a couple of unique features, and comes with better support and costs 2-3 times less. I consider AffiliatePress to be one of the best WordPress plugins for creating and managing affiliate programs with ease and efficiency. It’s quick and easy to install, activate, and set up, and you can start recruiting affiliates immediately. The free version offers basic affiliate tracking, while premium versions provide more advanced features, including performance tracking, various commission types, and detailed reports. The plugin is packed with features and integrates seamlessly with WooCommerce, as well as over 20 other plugins and systems. All data is stored locally in WordPress, giving you full control and avoiding subscription traps. 🔎 Read the full review here. 📋 AffiliatePress Pricing Plans Free – This plan includes 24 integrations, such as Woo, unlimited affiliates, commissions, payouts, and default features like sitewide commissions. Standard– Currently, this plan costs $69 (normally $99) per year and $169 for a lifetime for one website. It also comes with all the features of the FREE plan and, in addition, offers advanced reporting and fraud detection, user-specific commission rates, product selection for commissions, performance tracking, and signup bonuses. Professional – At the moment, the price is $119 per year (normally $199) and $229 for a lifetime. It comes with a 3-site installation. Besides the features in the standard plan, it offers a dedicated affiliate landing page, a coupon code, Stripe payouts, MLM-type, tiered, and recurring commissions. Also includes free installation and setup. Enterprise – Now the price for this plan is $249/year (normally $399) and $599 for a lifetime. It comes with 10 site installations. It has all the features of the Professional plan. -> Get AffiliatePress now with a 30% discount 🔥 Get AffiliatePress Now -> Get AffiliatePress now with a 30% discount