TechFlow news — On July 25, WazirX conducted a preliminary investigation into the recent cyberattack and shared findings with the crypto community. Key discoveries include:
No evidence of compromise found on WazirX signer machines;
The attack may have originated from Liminal's infrastructure, bypassing final validation steps;
Contrary to some reports, no malicious transactions were signed prior to July 18, 2024;
The attack involved contract upgrades, while Liminal’s interface reportedly does not allow such operations.
WazirX is currently evaluating two scenarios: one being a vulnerability in Liminal’s infrastructure enabling malicious transactions, and the other a sophisticated malware attack requiring simultaneous breaches of both WazirX and Liminal systems. At present, the former scenario appears more likely, though final forensic results are still pending.
