Infini Faces $49 Million Loss Following Smart Contract Exploit

Infini, a Hong Kong-based stablecoin platform, recently fell victim to a significant security breach, resulting in a loss of approximately $49 million.
The attack primarily targeted Infini’s smart contract, with the stolen funds originating from USDC and subsequently being funneled into a wallet associated with Tornado Cash, a tool used to anonymize transactions. The stolen funds were then converted into Ether.
The breach was confirmed by Cyvers and Blocksec security teams, who linked the incident to the exploitation of administrative privileges within Infini’s smart contract system. The contract in question, identified by the address 0x9A7, was allegedly set up by the attacker, under the pseudonymous address 0xc49, and was thought to have been part of Infini’s original project architecture.
READ MORE: Is Strategy Preparing for Another Massive Bitcoin Purchase?
In response to the attack, Infini expressed regret, assuring the public that their team was actively investigating the situation and working to secure their systems. Infini’s founder, Christian, clarified that the breach stemmed from the attacker’s retention of administrative control rather than a leak of private keys. He emphasized that liquidity remained unaffected and that impacted users would be reimbursed.
This incident follows another high-profile exploit, which occurred just days earlier, targeting Bybit in what is now considered one of the largest crypto hacks to date.











