Spectral Labs identifies Syntax vulnerability, pauses contracts

As a seasoned researcher with a keen eye for detail and a heart that beats for blockchain, I can’t help but feel a mix of dismay and concern upon reading about yet another instance of a crypto hack. The incident involving Spectral Labs serves as a stark reminder of the challenges we face in this nascent industry.


In simpler terms, Spectral Labs revealed they discovered a weakness in their Syntax platform, an area where users can build AI agents without coding, which potentially allowed a cybercriminal to steal approximately $200,000 worth of liquidity.

As reported by Spectral Labs, they’ve temporarily blocked access to Syntax due to an ongoing problem that needs resolving. Additionally, all contracts on their platform have been put on hold to prevent additional complications from arising. In a conversation with CryptoMoon, Spectral Labs disclosed the cause of the vulnerability.

“We suffered a vulnerability in the bonding curve, where the hacker was able to remove tokens at a cheap price. We are fixing the issue and will be running tests thoroughly before resuming.”

Additionally, the Spectral team has shared that they are collaborating with their industry peers to tackle the issue and bring back services at the earliest convenience.

Crypto hacks and exploits plague the crypto industry

Based on Immunefi’s report, the total losses due to cryptocurrency hacks and fraudulent activities amounted to approximately $71 million in November 2024. The vast majority of these losses were a result of hacking incidents or the exploitation of code.

In contrast to the first half of 2023, the year-on-year decrease in value for 2024 stands at 15%, which is encouraging news for the cryptocurrency sector.

Despite the reduction in overall losses, crypto hacks and exploits remain a serious threat to digital asset investors. On November 15, the decentralized finance project Thala was hacked for $25.5 million — representing the second largest hack of November 2024.

Currently, representatives from Thala have stated that the menacing entity took advantage of a solitary weakness or flaw in the v1 farming contract of Thala, thereby enabling them to empty liquidity tokens from the platform.

On November 18th, Thala managed to retrieve the $25.5 million that had been stolen and worked alongside law enforcement to track down the culprit. However, the identity of the hacker remains undisclosed.

On November 16, a significant security incident involving a private key leak occurred on the DEXX onchain trading terminal, resulting in substantial monthly losses for the platform. The initial assessment of the damages from this hack suggested a loss of approximately $21 million, but subsequent analysis revealed that the total losses had grown to around $30 million.

Read More

2024-12-01 23:31