.jpeg)
On February 23, 2025, the Infini stablecoin bank suffered a significant security breach, resulting in the theft of $49.5 million in USDC. Analysts from Lookonchain flagged suspicious transactions, revealing that the hacker exchanged the stolen USDC for DAI and subsequently purchased a substantial amount of Ethereum (ETH).
Key Takeaways
-
Infini stablecoin bank lost $49.5 million USDC due to a hack.
-
The hacker converted the stolen funds into DAI and bought 17,696 ETH.
-
The attack exploited vulnerabilities in the bank's smart contracts.
-
Infini's founder hinted that the attackers might be team members.
-
Full compensation for affected users is promised by the bank's leadership.
Details Of The Hack
The breach was first reported by Lookonchain, which noted that the hacker managed to swap the stolen USDC for DAI and then purchased 17,696 ETH. This amount was later transferred to a new wallet, raising alarms within the crypto community.
The attack targeted weaknesses in the smart contracts of the neobank, leading to a significant loss of funds. Christianeth, the founder of Infini, confirmed the incident and suggested that the attackers could be insiders, stating that he had been careless in transferring permissions.
Response From Infini
In a statement on social media, Christianeth reassured users that his personal private key had not been compromised, emphasizing that the responsibility for the breach lay with him due to oversight in permission management. He expressed his commitment to compensating all affected users, primarily using his personal funds.
"My personal private key was not stolen, so there’s no need to worry too much. I was negligent when I previously transferred permissions, and ultimately, it’s my responsibility. There are no liquidity issues," he stated.
Compensation Measures
Since the theft, Infini has processed withdrawal requests totaling $500,000. The team clarified that the hack affected only a portion of their financial management due to the suspension of contracts and the freezing of assets to prevent further risks. They assured users that all other services, including deposits and withdrawals, were functioning normally, with only the investment segment being impacted.
Future Outlook
The full recovery of the bank's operations is expected to take some time, as the team works to implement more secure measures and restore user confidence. This incident follows closely on the heels of another major hack, where the Bybit exchange lost $1.46 billion in Ethereum, allegedly linked to the North Korean Lazarus Group.
As the crypto industry continues to face challenges from cybercriminals, the Infini incident serves as a stark reminder of the importance of security in decentralized finance (DeFi) platforms. The community is watching closely as Infini navigates this crisis and works towards a resolution for its users.