# LI.FI Protocol Hacked— $10 Million Stolen So Far

> It was reported a severe security breach affecting the Li.fi protocol, with hackers draining close to $10 million. The exploit targets users with Unlimited approvals.

**Published by:** [Nefture Security](https://paragraph.com/@nefture/)
**Published on:** 2024-07-16
**Categories:** exploit, nefture
**URL:** https://paragraph.com/@nefture/lifiexploit

## Content

BREAKING: Li.fi Protocol Under Attack, $10 Million CompromisedKey Points:Li.fi protocol exploited, resulting in nearly $10 million in losses.We suspect a Call injection attack (unconfirmed)Immediate action: Users with unlimited approvals should revoke them immediately.Nefture has detected that LiFi protocol was being drained and alerted it’s users.It was reported a severe security breach affecting the Li.fi protocol, with hackers draining close to $10 million. The exploit targets users with Unlimited approvals.What Happened?We believe a call injection attack is responsible for the drain. This type of attack allows hackers to insert malicious code that executes legitimate functions, giving them control over transactions and enabling the theft of funds. The exploit was confirmed by LIFI in this tweet:Source: TwitterImmediate Steps To Take for LI.FI Users:Revoke all approvals for these addresses immediately:0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae0x341e94069f53234fE6DabeF707aD4248305257150xDE1E598b81620773454588B85D6b5D4eEC32573e0x24ca98fB6972F5eE05f0dB00595c7f68D9FaFd68Revoke your approvals on all the chains through revoke.cash or other revoking tools.Nefture advises all users to avoid interacting with any applications using the Li.fi protocol until the investigation is complete and revoke your approvals as soon as possible.Nefture is monitoring the situation closely and will alert users directly in case of any updates.Stay updated by following us on Twitter!About usNefture is a Web3 real-time security and risk prevention platform that detects on-chain vulnerabilities and protects digital assets, protocols and asset managers from significant losses or threats.Nefture core services includes Real-Time Transaction Security and a Threat Monitoring Platform that provides accurate exploits detections and fully customized alerts covering hundreds of risk types with a clear expertise in DeFi.Today, Nefture proudly collaborates with leading projects and asset managers, providing them with unparalleled security solutions.Book a meeting 🤝 Nefture Calendly

## Publication Information

- [Nefture Security](https://paragraph.com/@nefture/): Publication homepage
- [All Posts](https://paragraph.com/@nefture/): More posts from this publication
- [RSS Feed](https://api.paragraph.com/blogs/rss/@nefture): Subscribe to updates
- [Twitter](https://twitter.com/nefture): Follow on Twitter

## Optional

- [Collect as NFT](https://paragraph.com/@nefture/lifiexploit): Support the author by collecting this post
- [View Collectors](https://paragraph.com/@nefture/lifiexploit/collectors): See who has collected this post