Second Exploited in Ark Server Attack, No User Funds Lost
- Second lost 0.75 BTC due to an exploit targeting its Ark server.
- The attack involved a bug in the boarding flow of Second’s Ark server, allowing unauthorized transactions.
- A denial-of-service (DoS) attack was launched by attackers, potentially impacting Lightning Network receives on Bark-based wallets.
- The hacker attempted to use bitcoin linked to the Blink Wallet breach but failed.
- Second confirmed that no user funds were affected, and a fix was deployed within hours of detection.
The exploit on Second’s Ark server resulted in a loss of bitcoin, but user funds remained secure due to pre-signed exit paths for VTXOs. The team quickly addressed the issue by deploying a fix and ensuring no further breaches occurred.
Despite the attacker’s attempts to exploit vulnerabilities and use compromised bitcoin from previous breaches, Second’s security measures ensured that user funds were not compromised, highlighting the effectiveness of their system design under pressure. (Source)
