Crypto Heist: $76M Vanishes Faster Than My New Year’s Resolutions

by

Finance

The Highlights (or Lowlights, Depending on Your Perspective):

  • Echo Protocol, the DeFi darling, just got a $77 million haircut-courtesy of a hacker with a knack for admin keys.
  • The thief didn’t just stop at minting tokens; they borrowed WBTC like it was library books and laundered it through Tornado Cash, because why not add a little drama?
  • Echo Protocol claims they’ve “regained control” and burned the remaining eBTC. Sure, Jan. Next time, maybe don’t leave the keys under the welcome mat?

Another day, another DeFi platform getting robbed blind. Echo Protocol, the latest victim in this crypto crime spree, lost a cool $77 million in what can only be described as a masterclass in audacity. The attacker, clearly a fan of the “go big or go home” philosophy, used a compromised admin key to mint 1,000 unauthorized eBTC on the Monad blockchain. Because, you know, why earn it when you can just make it appear?

But wait, there’s more! After minting the tokens, our intrepid thief borrowed $3.45 million in wrapped bitcoin (WBTC) from Curvance, because apparently they needed a little extra spending money. Then, in a move that screams “I’m not even trying to be subtle,” they laundered the funds through Tornado Cash. Classy.

Echo Protocol, in a move that’s either heroic or just plain damage control, says they’ve “regained control” of the admin keys and burned the remaining 955 eBTC the attacker still held. They’ve also paused cross-chain functionality and upgraded their Monad contract, which is the digital equivalent of locking the barn door after the horse has bolted.

“We’ve strengthened control over sensitive functions,” Echo said on X, presumably while crossing their fingers and hoping for the best. They’ve also paused Aptos bridge operations, just in case the hacker decides to drop by for a sequel.

Echo Protocol, for those not in the know, is a platform that promises liquidity and yield on bitcoin holdings through synthetic representations like eBTC. It’s like a magic trick, but instead of pulling a rabbit out of a hat, you pull money out of thin air-until someone else pulls it out of your wallet.

This attack is just the latest in a string of DeFi heists that have left the crypto world reeling. Drift Protocol and KelpDAO recently lost over $200 million each, proving that in the world of decentralized finance, the only thing that’s truly decentralized is security.

So, what’s the moral of the story? Maybe don’t leave your admin keys lying around. Or, if you’re a hacker, keep up the good work-you’re giving us all something to write about.

Read More

2026-05-19 11:43