Ethereum Layer 2 Protocol Loopring Faces Security Breach in Smart Wallets!

Key Points:

• Ethereum Layer 2 protocol Loopring reported a vulnerability affecting smart wallets using its Guardian feature, leading to asset losses.
• Attackers exploited the recovery process, impersonating owners to reset wallet ownership and withdraw funds.
• Loopring suspended the recovery feature, initiated an investigation, and advised users to review security settings and avoid recovery processes.

Ethereum Layer 2 protocol Loopring announced that some of its smart wallets have fallen victim to a sophisticated attack.

The vulnerability primarily affected wallets utilizing Loopring‘s official Guardian feature, a critical component designed to enhance wallet security.

🚨Incident Alert: Loopring Smart Wallets Compromised🚨

A few hours ago, some Loopring Smart Wallets were targeted in a security breach. The attack exploited wallets with only one Guardian, specifically the Loopring Official Guardian. The hacker initiated a Recovery process,… pic.twitter.com/Y9mYC4j9QJ

— Loopring💙 (@loopringorg) June 9, 2024

The breach occurred when hackers initiated a recovery process, effectively impersonating legitimate wallet owners. By exploiting this vulnerability, the attackers were able to reset the ownership of the compromised wallets and withdraw assets, leading to substantial losses for the affected users.

Ethereum Layer 2 Protocol Loopring’s Guardian feature is intended to provide an additional layer of security by allowing trusted entities or individuals to assist in the recovery of a wallet in case of loss or theft of private keys. However, the attackers managed to circumvent these protective measures, raising concerns about the robustness of current security protocols within the Loopring ecosystem.

Readmore: Loopring Review: Unlocking The Benefits Of Loopring, 2024 Comprehensive Review

Loopring’s Swift Response and User Guidance

Ethereum Layer 2 Protocol Loopring has responded swiftly to the incident, issuing a statement acknowledging the breach and outlining immediate measures to mitigate the damage. The company has temporarily suspended the recovery feature and is working closely with security experts to identify the root cause of the vulnerability. Additionally, Loopring has assured users that it is taking all necessary steps to prevent future occurrences of such attacks.

Ethereum Layer 2 Protocol Loopring has urged all users to review their wallet security settings and to remain vigilant against potential phishing attempts and other forms of social engineering. The company has also advised users to avoid initiating recovery processes until further notice.

Source