Blueberry protocol pauses lending amid $1.35m drain

Fraudsters hacked the Blueberry DeFi protocol and advised users to withdraw money.

The Blueberry project team shared in their post X on Feb. 23 that they had to stop work due to the exploit.

Details of the exploit are being determined. The developers advised users to withdraw funds from the platform. However, users have reported withdrawal problems through Blueberry, noting that the front-end interface needs to be fixed.

“We are pausing the protocol as quickly as possible.”

Blueberry team

The Blueberry Protocol is a decentralized lending marketplace that allows leveraged lending and borrowing up to 20x the value of the collateral.

Blueberry later added another update stating that all leaked funds had been transferred to c0ffeebabe.eth and were safe in Blueberry’s multi-sig except for validator payments. A total of 457 Ethereum (ETH) (around $1.35 million) was initially drained, but 366 ETH was rescued by the so-called “white hat” and returned to the multi-sig wallet.

“Deposited funds are currently safe. Only three markets were affected, and the large majority was already returned.”

Blueberry team

Earlier in February, fraudsters hacked the PlayDapp blockchain gaming platform based on Ethereum. During the attack, the attackers mined 200 million PLA coins. According to analysts, the reason was the compromise of private keys associated with PlayDapp. They noted that the hackers added a new address, resulting in 200 million PLA, or $31 million.

However, the losses were then updated, and the platform lost over $290 million, marking the largest hack since 2022. PlayDapp has paused the PLA smart contract and proposed a migration plan to shift to a new PDA token for the network.