On 2021-10-16, Bank of England wholesale CBDC pilots suffered a kms misconfiguration incident resulting in approximately $32,668,464 in losses. The exploit targeted the infrastructure layer. Attribution: dprk_lazarus. This is a demonstration entry — not a real incident.
Matches the phishing drainer predicate
Matches the frontend dns hijack predicate
Matches the supply chain npm predicate
Matches the dvn collapse predicate
Matches the kms misconfiguration predicate
Matches the regulatory seizure predicate
frontend_host = cloudflare_pagessubsector_tags = general_defi, consumer_appmethod_b_root_causes = frontend_dns_hijack, supply_chain_npmkms_provider = aws_kmsfrontend_host = cloudflare_pagessubsector_tags = consumer_app, infra_toolingmethod_b_root_causes = dvn_collapsekms_provider = aws_kmsfrontend_host = cloudflare_pagessubsector_tags = consumer_app, infra_toolingmethod_b_root_causes = supply_chain_npmkms_provider = aws_kmssubsector_tags = general_defi, infra_tooling, consumer_appmethod_b_root_causes = phishing_drainerfrontend_host = cloudflare_pagessubsector_tags = consumer_app, general_defi, infra_toolingmethod_b_root_causes = frontend_dns_hijackfrontend_host = cloudflare_pagessubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = dvn_collapsekms_provider = aws_kmssubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = kms_misconfigurationkms_provider = aws_kmssubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = frontend_dns_hijackfrontend_host = cloudflare_pagessubsector_tags = consumer_app, infra_tooling, general_defimethod_b_root_causes = frontend_dns_hijackkms_provider = aws_kmssubsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = kms_misconfiguration