DeFi platform Kyber discovered a vulnerability in its website code that allowed attackers to steal approximately $265,000. The attack affected two major wallets and the KyberSwap decentralized exchange.
According to a company statement, KyberSwap smart contracts were not affected, but the problem stemmed from malicious code in Google Tag Manager on the exchange's website.
🗯 "We urge all DeFi projects to conduct a thorough check of your external code and related Google Tag Manager (GTM) scripts, as an attacker could have attacked multiple sites," the developers said.
The project team also stressed that it would reimburse victims for their money.