On February 24, 2025, the digital bank Infini platform encountered a major security incident. Hackers used technical vulnerabilities to steal about $49.5 million in funds, causing shock in the industry. The official has responded quickly, initiated the compensation process, and actively tracked down the flow of funds.

Event Review:
-
Huge losses: Hackers stole 49,516,662 USDC (approximately US$49.5 million) in two batches and exchanged them for other stablecoins such as ETH and DAI.
-
Attack method: Hackers use smart contract vulnerabilities to directly steal funds by obtaining special permissions. Security experts analyzed that the attacker is skilled and may have omissions in private key management or permission control vulnerabilities.
-
Official response: The co-founder and founder of the Infini platform promised to fully compensate the user's losses, and said that the platform has sufficient liquidity and the withdrawal function is normal. The engineer involved has been controlled, the platform has reported the case and cooperated with several security agencies to track down funds. The official acknowledges that the vulnerability originated from negligence during the permission transfer process, but denied that the private key was leaked.
Safety warning and industry reflection:
-
Technical risks are highlighted: This event once again warns of the importance of smart contracts and private key management. The leakage of a single private key or the weak permission control can lead to serious security accidents.
-
Industry lessons: Decentralized platforms need to strengthen permission hierarchical management to avoid single point of failure risk; users need to carefully choose platforms with transparent risk control mechanisms and sufficient solvency.
Second follow-up of the incident:
The Infini team promises to continue to update event progress and plans to improve the security architecture. Some of the stolen assets have been laundered through Tornado Cash, making it difficult to recover them.
Summary:
The rapid response and compensation commitment of the Infini platform will help rebuild user trust, but long-term security mechanism construction is the key to the healthy development of the industry. This incident once again reminds the DeFi field that security cannot be ignored.
The above is the detailed content of A sudden outbreak! Infini was attacked by hackers and lost nearly $50 million! Official promises to pay in full. For more information, please follow other related articles on the PHP Chinese website!
Statement:The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn