Bitfinex thwarts $15 billion security breach attempt

ExcalibuR

Legend
LEGEND
PREMIUM
MEMBER
Joined
Jan 17, 2025
Messages
4,031
Reaction score
7,796
Deposit
11,800$
An alleged XRP transaction worth nearly $15 billion from an unknown wallet on Bitfinex was part of a failed partial payment exploit. This was stated by CTO of the exchange Paolo Ardoino.

Someone attempted to attack @bitfinex via "Partial Payments Exploit".
Attack failed since Bitfinex properly handles 'delivered_amount' data field.https://t.co/EiGw9UQmmq

(updated with better gif) https://t.co/8I7vlO05ou pic.twitter.com/DxOnJLLkhU
— Paolo Ardoino (@paoloardoino) January 14, 2024
https://twitter.com/x/status/1746625178845471112
Click to expand...

Initially, the Whale Alert service drew attention to the transfer of approximately half of the XRP market supply. However, the team later deleted the tweet and stated that there was an "issue with correctly reading the Ripple node response, resulting in several erroneous messages."

dfb372e99b.png



Ardoino explained that this was an attack on the partial payments function, and the attacker expected that the exchange’s software was not configured correctly to process such transactions.

The exploit assumes that in the case of a partial payment, the system calculates the amount from the Amount field, but should - from the delivered_amount, which indicates the actual amount of the transfer.

Ardoino noted that Bitfinex has its field processing configured correctly.

According to the blockchain explorer, an unknown person also tried to attack Binance with the transfer of 58.9 billion XRP. The actual transaction amount was 0.0017 XRP.

2188b46b7a.jpg
 
Top Bottom