Overview
- At 12:05 UTC on Sept. 23, attackers accessed a Seedify developer’s key and used bridge permissions to mint large amounts of SFUND, then dumped tokens across networks including BNB Chain, Ethereum, Arbitrum and Base.
- Seedify halted trading, disabled all bridges, revoked compromised permissions, blacklisted attacker wallets and offered bounties to aid tracing and recovery.
- On-chain analysis by Seedify and ZachXBT linked the theft addresses to DPRK “Contagious Interview” campaigns, with security researchers urging multi-signature controls and continuous monitoring for bridges.
- Reported loss estimates range from roughly $1.2 million to about $1.7 million, and Binance’s Changpeng Zhao said around $200,000 was frozen at HTX while most funds remain on-chain.
- SFUND saw an extreme intraday plunge nearing 99% before partial stabilization around $0.21–$0.28, with about 64,000 holders affected on BNB Chain.