According to information shared by Cyvers Alerts, the decentralized financial project DeltaPrime's wallet is suspected to have a private key leak and was attacked this afternoon, resulting in losses of over $6 million worth of cryptocurrency. The project has deployment contracts on both the Arbitrarum and Avalanche memory blockchains, and this attack only involved the Arbitrarum version.

Security company Cyvers stated that the condition of DeltaPrime appears to be caused by the leakage of administrator private keys, and the affected fund pools currently include DPUSDC, DPARB, and DPBTCb. At the same time, the DeltaPrime team has also issued a statement confirming this news and stating that the team is investigating and addressing the issue.

Fuzzland founder Chaofan Shou explained the attack incident in detail on X. Chaofan Shou stated that hackers first took control of the administrator address 0xx40e4ff9e018462ce71fa34abdfa27b8c5e2b1afb of the proxy contract. Subsequently, the hacker upgraded the proxy contract and directed it towards the malicious contract 0xD4CA224a176A59ed1a346FA86C3e921e01659E73, thereby stealing funds.

Proxy contract is a contract that interacts with users and other contracts. It has a simple logic and serves as an intermediary, but it is an important component of many on chain protocols because once it is breached, the entire protocol may be affected.

And on chain detective ZachXBT also posted on X, stating that although it is unclear whether there is a connection, ZachXBT stated that he had warned the DeltaPrime team that there were North Korean IT workers lurking in his team, but the team replied that all North Korean workers had been fired.