• Li.fi protocol exploited, resulting in nearly $10 million in losses.

• We suspect a Call injection attack (unconfirmed)

• Immediate action: Users with unlimited approvals should revoke them immediately.

Nefture has detected that LiFi protocol was being drained and alerted it’s users.

It was reported a severe security breach affecting the Li.fi protocol, with hackers draining close to $10 million. The exploit targets users with Unlimited approvals.

We believe a call injection attack is responsible for the drain. This type of attack allows hackers to insert malicious code that executes legitimate functions, giving them control over transactions and enabling the theft of funds.

The exploit was confirmed by LIFI in this tweet:

Source: Twitter

Revoke all approvals for these addresses immediately:

• 0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae

• 0x341e94069f53234fE6DabeF707aD424830525715

• 0xDE1E598b81620773454588B85D6b5D4eEC32573e

• 0x24ca98fB6972F5eE05f0dB00595c7f68D9FaFd68

Revoke your approvals on all the chains through revoke.cash or other revoking tools.

Nefture advises all users to avoid interacting with any applications using the Li.fi protocol until the investigation is complete and revoke your approvals as soon as possible.

Nefture is monitoring the situation closely and will alert users directly in case of any updates.

Nefture is a Web3 real-time security and risk prevention platform that detects on-chain vulnerabilities and protects digital assets, protocols and asset managers from significant losses or threats.

Nefture core services includes Real-Time Transaction Security and a Threat Monitoring Platform that provides accurate exploits detections and fully customized alerts covering hundreds of risk types with a clear expertise in DeFi.

Today, Nefture proudly collaborates with leading projects and asset managers, providing them with unparalleled security solutions.

Book a meeting 🤝 Nefture Calendly