Security Incident · ETH Ecosystem
RocketSwap Private Key Leak
The Base ecological project RocketSwap was attacked.
- Reported loss
- 471 ETH
- Attack category
- Private Key Leakage
Incident Overview
The attacker cross-chained the stolen assets to Ethereum, resulting in a loss of 471 ETH (approximately $868,000). RocketSwap said: "The team needs to use offline signatures and put the private key on the server when deploying Launchpad. It is currently detected that the server has been brute-forced, and because the farm contract uses a proxy contract, there are multiple high-risk permissions that lead to the transfer of farm assets."
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.