Hackers of the DeFi project – Uranium Finance – began transferring 2,250 ETH worth approximately $3.35 million into the popular mixer TornadoCash. On March 7, blockchain security firm PeckShield detected the movement of funds in the wallet.
Data from Etherscan shows that hackers moved transaction funds ranging from 1 ETH to 100 ETH over a seven-hour time frame. In addition to this, another Ethereum wallet associated with the hacker shows that it was last active 159 days ago. Measuring it further, 5 ETH was found to be sent to a privacy-focused Ethereum zk-rollup on Aztec.
Uranium Finance was exploited on April 28, 2021. Attackers targeted its v2.1 token migration event and exploited the project's balance modifier. Binance Smart Chain-based protocol loses $50 million in funds. While the team maintained its innocence, false allegations surfaced.
Shortly after the exploit, Uranium Finance shelved v3 plans and announced a general shutdown.
Its last article says, “We will of course continue to help Binance and our users as much as we can via Telegram, and if funds are secure, we will help with everything in the redistribution, but this is the end of Uranium. We will not try to bring this project back to life again, It's impossible to do that under the circumstances."
