Loopring, an Ethereum ZK-Rollup protocol, reported a breach on June 9 that exploited its smart wallets, resulting in the theft of approximately $5 million worth of 1,373 ETH. This incident occurred due to a compromise in Loopring’s two-factor authentication (2FA) service, allowing the hacker to reset ownership and withdraw assets.
Loopring had boasted its smart wallets as the most secure on the Ethereum blockchain, incorporating advanced security measures. However, the breach undermines these claims and raises questions regarding the reliability of such technologies. The firm is now collaborating with blockchain security experts, including SlowMist, to investigate the breach and has temporarily suspended Guardian and other 2FA-related operations.
This incident comes at a time when smart wallets are gaining momentum in the Ethereum community, especially after the Ethereum Foundation’s ERC-4337 account abstraction went live. Despite the growing support, decentralization advocate Chris Blec and other experts like Pratik Kala caution users to stick with traditional, securely-stored seed phrases and hardware wallets for significant assets.
The strategic importance of this breach lies in its implications for smart wallet security and the broader adoption of blockchain technologies. Loopring’s ongoing investigation and cooperation with law enforcement highlight their commitment to addressing vulnerabilities.
