Well.... 2024 didn't started as good as I wanted! Just dropping some tl;dr now and will write a full post-mortem article whenever I will feel better!
PVM got "hacked" not once but twice, and lost his big bag of crypto! Got drained of $POOL, $OP, $ACX and all my USDC!
First time it happened after I completed three ACX to USDC swaps on Velodrome, with the third one failing. Didn't considered that suspicious but few hours later I seen that all the remaining $ACX and $OP got drained! Boom... $8,000 worth of crypto gone!
Was 19th of December and opened a ticket on Velodrome, which got answered not that fast. Took them two weeks to tell me is "less likely to be after the interaction with Velo.
Wasn't happy about the answer, considering that METAMASK support said it was very likely that the drainer was approved in that 3rd swap that failed.
They said that nasty stuff could still be in the Velodrome code, after the two hacks and attacks over their UI.
But the hacker took "pedal power" to a whole new level, stealing my Optimism... literally!
Disappointed by Velodrome support and answers, I wanted to withdraw the ACX - ETH LP I had in there plus any remaining crypto.
I started with claiming the earned $VELO, then silly enough decided to lock it for one year and forgot about it!
Done a handful of transactions and got drained again! Boom... all my USDC gone along with the $POOL. Nearly $19,000 of stable and 3000 $POOL tokens lost on the 2nd of January!
Happy new year! Time to touch some grass and keep telling myself that loosing $30,000 is not that bad! Life goes on!
