Share this article
Crypto Broker DeltaPrime Drained of Over $6M Amid Apparent Private Key Leak
The project is offered on both Arbitrum and Avalanche blockchains. Monday’s exploit impacted only the version on Arbitrum as of European morning hours.
Updated Sep 16, 2024, 5:58 p.m. Published Sep 16, 2024, 7:40 a.m.
- Over $6 million in tokens were drained from DeltaPrime wallets due to a private key leak, affecting only the Arbitrum version of the project.
- The exploit involved a hacker gaining control over an admin proxy, redirecting it to a malicious contract, leading to significant financial loss.
Over $6 million worth of various tokens from wallets belonging to on-chain brokerage DeltaPrime were drained early Monday after an apparent private key leak, security researchers said on X.
The project is offered on both Arbitrum and Avalanche blockchains. Monday’s exploit impacted only the version on Arbitrum as of European morning hours - and users could not withdraw funds (on Arbitrum) due to how the utilization of borrowing and lending works on the platform.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
A hacker gained control of 0xx40e4ff9e018462ce71fa34abdfa27b8c5e2b1afb, which is the admin of proxies. Then, the hacker upgraded the proxies to point to malicious contract 0xD4CA224a176A59ed1a346FA86C3e921e01659E73, Fuzzland founder Chaofan Shou said on X.
Proxy is a contract that interacts with users and other contracts. It contains minimal logic and serves as an intermediary, but it is a key part of any application, as a compromise can mean the entire protocol is impacted.
Delta Prime @DeltaPrimeDefi admin private key leaked. All pools are drained. $7M loss already. Withdraw ASAP!https://t.co/uNn5nZoHp3 pic.twitter.com/se3RebRjpX
— Chaofan Shou (@shoucccc) September 16, 2024
Security firm Cyvers confirmed the exploits in a Telegram message to CoinDesk, stating tit detected “multiple suspicious transactions” involving Delta Prime and that it “seemed that admin has lost the private key.
“Affected pools so far are the #DPUSDC, #DPARB, #DPBTCb,” Cyvers said, referring to on-chain lockers holding USDC stablecoins, Arbitrum’s ARB and bitcoin .
Messages sent by Delta Prime team members on its Discord channel viewed by CoinDesk said the team was investigating and working on the issue. They did not outright confirm or announce the exploit or reveal specific details as of European morning hours.
DeltaPrime’s PRIME tokens are down 6.5% in the past 24 hours, tracking a market-wide drop led by ether .
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Bitcoin Faces Japan Rate Hike: Debunking The Yen Carry Trade Unwind Alarms, Real Risk Elsewhere
Speculators maintain net bullish positions in the yen, limiting scope for sudden JPY strength and mass carry unwind.
What to know:
- Impending BOJ rate hike largely priced in; Japanese bond yields near multi-decade highs.
- Speculators maintain net bullish positions in the yen, limiting scope for sudden yen strength.
- BOJ tightening may contribute to sustained upward pressure on global yields, impacting risk sentiment.
Top Stories
