Crypto Hack: LI FI Cross-Chain Aggregator Suffers $9.73M Breach

Crypto Hack: LI FI suffers $9.7M hack, with funds swapped from USDC and USDT to ETH. Users urged to revoke approvals to secure assets amid investigations.
By Kelvin Munene Murithi
Updated May 20, 2025
Pump Fun Hacker Nabbed In London, Makes Troubling Revelation

Highlights

  • LI FI cross-chain aggregator suffers $8.7M breach; attackers converting stablecoins to ETH.
  • Users urged to revoke approvals on compromised LI FI addresses to prevent further losses.
  • Ongoing crypto hacks expose vulnerabilities; over $19.3M lost in recent UwU Lend incident.

Crypto Hack: LI FI, a cross-chain transaction aggregator, has recently suffered a security breach. Cybers Alerts has reported some transactions as potentially fraudulent and has recommended that users should cancel them. The hacker has withdrawn over $9.7 million, mostly in stablecoins, and is swapping USDC and USDT for ETH.

Advertisement
Advertisement

LI FI Cross-Chain Aggregator Suffers $9.7M Breach

According to a report by Cybers Alerts, the LI FI breach is associated with the Ethereum address 0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae. Per the announcement, this address should not be approved by the users, and approvals should be withdrawn as soon as possible. The current impact of the attack has been estimated to be around $9.73 million of user funds.

The majority of these funds are stablecoins like USDC and USDT, which the attacker swaps for ETH.

The LI FI team has recommended to the users not to use any LI FI based applications for now. They have given a list of addresses for which approvals should be withdrawn in order to avoid any further access.

Advertisement
Advertisement

Urgent Revocation of Approvals

In response to the breach, LI FI has identified four additional addresses that require immediate revocation of approvals: The impressions are 0x341e94069f53234fE6DabeF707aD424830525715, 0xDE1E598b81620773454588B85D6b5D4eEC32573e, and 0x24ca98fB6972F5eE05f0dB00595c7f68D9FaFd68.

These addresses have a setting called Infinite Approvals which if active, can pose a risk to the user and must be corrected by removing them with the recommended tools including revoke. cash.

LI FI team is in the process of working on the exploit and therefore has shut down Sharpe Bridge and Sharpe Refuel. Users who have not configured infinite approvals are not affected, and other Sharpe applications are also not affected.

Advertisement
Advertisement

Ongoing Crypto Hack Investigations

The LI FI breach is one of the latest security incidents in the DeFi sector. For instance, the DeFi lending protocol known as UwU Lend was hacked, and the attackers removed about $19.3 million. In this incident, the hacker performed three transactions within six minutes to steal major cryptocurrencies, including WBTC and stablecoins.

Moreover, the recent Squarespace incident has affected over 105 Web3 platforms, including popular projects such as Compound Finance and Celer Network. This breach has impacted many platforms from which we see the necessitation of implementing better security protocols in the crypto market.

Security companies like Arkham and Cyvers have been on the lookout for these breaches. Thus, the LI FI breach has elicited a prompt reaction from the community, with security companies and applications encouraging people to act and secure their funds. The current investigations are in a bid to establish the causes of the exploit thus preventing the occurrence of similar incidents.

Read Also: WLD Price Skyrockets 21% as TFH Announces Token Lockups

Advertisement
Kelvin Munene Murithi
Kelvin Munene is a crypto and finance journalist with over 5 years of experience, offering in-depth market analysis and expert commentary . With a Bachelor's degree in Journalism and Actuarial Science from Mount Kenya University, Kelvin is known for his meticulous research and strong writing skills, particularly in cryptocurrency, blockchain, and financial markets. His work has been featured across top industry publications such as Coingape, Cryptobasic, MetaNews, Cryptotimes, Coinedition, TheCoinrepublic, Cryptotale, and Analytics Insight among others, where he consistently provides timely updates and insightful content. Kelvin’s focus lies in uncovering emerging trends in the crypto space, delivering factual and data-driven analyses that help readers make informed decisions. His expertise extends across market cycles, technological innovations, and regulatory shifts that shape the crypto landscape. Beyond his professional achievements, Kelvin has a passion for chess, traveling, and exploring new adventures.
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.