A tweet from RocketSwap, a project within the Base ecosystem, has disclosed that their assets were stolen due to a server breach caused by brute force attacks. The team mentioned that during the deployment of the launchpad, they needed to use offline signatures and stored private keys on their servers. Unfortunately, the breach resulted in the theft of assets.
CertiK Alert has issued a tweet reporting that RocketSwap has been targeted by a vulnerability attack. The attacker managed to utilize Stargate Finance to bridge the stolen assets onto the Ethereum network, resulting in a loss of 471 ETH (approximately $868,000). The address of the attacker is 0x96c0876F573e27636612CF306C9db072d2B13DE8.
After stealing ETH, the address created a token named loveRCKT and added 400 ETH worth of liquidity to it.