Security incident · 2022-01-10
Lympo
According to the public DefiLlama incident dataset, Lympo (Ethereum) suffered a security incident on 2022-01-10, with about $18.7M reported lost.
| Date | 2022-01-10 |
|---|---|
| Reported loss | $18.7M |
| Chain | Ethereum |
| Target type | NFTfi |
| Technique class | Key Compromise |
| Technique | Hot Wallet Key Compromised |
| Bridge incident | No |
| Within 2022 | #21 by loss that year, 0.5% of all reported losses that year |
How this kind of attack works
Private keys or signing rights that controlled the funds were stolen, and the attacker moved the money with valid signatures. On chain it looks like a normal transfer.
Would a pre-payment check have helped
Key compromise is a wallet and key-security matter; screening the counterparty or endpoint does not touch it.