On February 23, 2025, Infini, an important company in crypto financial card services, was caught in a serious security crisis. On that day, the Infini platform was suspected of being maliciously attacked, and about $49.5 million in funds were stolen from the Ethereum address, causing a shock in the cryptocurrency community.
Security company CertiK reported that funds were transferred abnormally, and the attacker converted 49.5 million DAI into about 17,700 ETH and then transferred it to a new address.
Infini co-founder Christine quickly responded on the social platform, saying that the incident was not a private key leak, but an operational error during the transfer of authority. The engineer involved has been controlled and the company has also called the police. To appease users, she promised to pay full compensation to affected users.
Blockchain security companies are also taking active action. Yu Xian, the founder of SlowMist, said that the team has fully followed up and pointed out that the attacker is highly skilled. Paidun monitoring found that the attacker suspected that the attacker used Tornado Cash to inject funds into the wallet, and there may be loopholes in private key management. Infini officially confirmed that it was caused by an operational error by an internal engineer.
At present, the Infini team is fully committed to tracing the flow of funds and promised to publish progress in a timely manner. The founder's quick response and compensation promise have alleviated user concerns to a certain extent. However, this incident highlights the vulnerability of the crypto industry in security management and internal control.
The follow-up of the incident is full of unknowns. Whether the stolen funds can be recovered and whether more detailed investigation results will be announced have become the focus of the cryptocurrency community and the entire industry. #Infini遭攻击 #bybit被盗
Disclaimer: Includes third-party opinions. No financial advice. May include sponsored content.See T&Cs.