Security incident · 2023-03-30
Rocket Pool
According to the public DefiLlama incident dataset, Rocket Pool (Ethereum) suffered a security incident on 2023-03-30, with about $3.8M reported lost.
| Date | 2023-03-30 |
|---|---|
| Reported loss | $3.8M |
| Chain | Ethereum |
| Target type | Token |
| Technique class | Social Engineering |
| Technique | Phishing |
| Bridge incident | No |
| Within 2023 | #39 by loss that year, 0.2% of all reported losses that year |
How this kind of attack works
The target was people rather than code: phishing sites, fake airdrops or impersonated staff led victims to sign or transfer themselves.
Would a pre-payment check have helped
Phishing and fake-airdrop hosts show up in public domain feeds, and some payee addresses are already listed. Screening the endpoint and the counterparty before paying catches part of this class.
Other incidents with the same technique
- Bybit2025-02-21 · $1.40B
- FTX2022-11-12 · $450.0M
- DMM Bitcoin2024-05-31 · $305.0M
- WazirX: India2024-07-18 · $234.9M
- Wintermute2022-09-20 · $160.0M
- Poloniex2023-11-10 · $126.0M