Darknet Diaries
152: Stacc Attack
· Summarized
Key takeaways
- Jared’s initial experience with photography illustrates the potential disconnect between passion and fear of failure, especially when it comes to expensive equipment.
- The cryptocurrency world can oftentimes feel like a chaotic and unregulated environment, where exploitation and questionable ethics run rampant.
- Jared’s story highlights the importance of understanding the vulnerabilities within the cryptocurrency systems and the ease with which they can be exploited by those with the technical skills.
- The aftermath of Jared’s heist not only showcases the dramatic consequences of his actions but also raises questions regarding the ethics and operations of the platforms he worked with.
Summary
Jared's Journey into Photography
The episode begins with Jared sharing his experience with photography, beginning with a desire to own a DSLR camera, specifically the Canon 5D Mark II. He describes how he couldn't afford it at first and how he bought and sold cheaper cameras to eventually be able to purchase the 5D Mark II. However, after purchasing it, he found that the fear of damaging such an expensive piece of equipment led to him not using it, ultimately causing a disconnect between him and the passion he once had for photography.
The Dramatic Heist: Stacc Attack
Jared, also known as StaccOverflow, is introduced as someone who executed a dramatic heist on a cryptocurrency platform called Pump Fun. Despite a troubled history and mental health challenges, including the loss of his mother and struggles with addiction, Jared's technical skills in cryptocurrency lead him to exploit the vulnerabilities of the Pump Fun platform. His hacking operation, which he dubbed "Stacc Attack," highlights the ease with which such crimes can occur in the crypto space, using flash loans to redirect funds from the platform.
Ethical Concerns in Cryptocurrency and Pump Fun
As Jared dives deeper into the crypto world through Pump Fun, he uncovers various ethical concerns related to the platform's lack of regulation, KYC (Know Your Customer), and AML (Anti-Money Laundering) policies. He mentions instances of disturbing content on the site catering to those making meme coins and observes that many participants seem to be fully aware of the ridiculousness of their investments. Jared's own actions are positioned as an attempt to highlight the exploitation and instability prevalent in the cryptocurrency world.
The Aftermath of the Heist
Jared's heist leads to an internal investigation at Pump Fun and ultimately law enforcement pursuing him. In his reflections, he describes the odd mix of feelings surrounding his theft and the chaotic environment of Pump Fun where new meme coins were proliferating rapidly. The consequences of his actions include a total of about $2 million in stolen funds, which were rather randomly redistributed to other projects throughout the heist. The episode ends with Jared facing the legal repercussions of his actions, with discussions of potential prison time, and his ongoing mental health battles.
Sponsors
- Cobalt Strike · Cobalt Strike simulates real-world, advanced cyber attacks to enable red teams to proactively evaluate an organisation’s security readiness and defence response. Their Command and Control framework gives red teamers the ability to customise their engagements and incorporate their own tools and techniques, allowing you to stress-test specific parts of your incident response capabilities.
- Axonius · The Axonius solution correlates asset data from your existing IT and security solutions to provide an always up-to-date inventory of all devices, users, cloud instances, and SaaS apps, so you can easily identify coverage gaps and automate response actions. Axonius gives IT and security teams the confidence to control complexity by mitigating threats, navigating risk, decreasing incidents, and informing business-level strategy — all while eliminating manual, repetitive tasks.
- ThreatLocker · ThreatLocker is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker Allowlisting and Ringfencing, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware!
Show notes
Jarett Dunn, AKA StaccOverflow, stole millions of dollars from a website called Pump Fun, and he wanted to do it in the most dramatic and theatrical way he could. His big heist is known as the “Stacc Attack”.
He has a merch store now freestacc.io.
Sponsors
Support for this show comes from Cobalt Strike. Cobalt Strike simulates real-world, advanced cyber attacks to enable red teams to proactively evaluate an organisation’s security readiness and defence response. Their Command and Control framework gives red teamers the ability to customise their engagements and incorporate their own tools and techniques, allowing you to stress-test specific parts of your incident response capabilities. Learn more about Cobalt Strike and get a custom demo at https://cobaltstrike.com/darknet.
Support for this show comes from Axonius. The Axonius solution correlates asset data from your existing IT and security solutions to provide an always up-to-date inventory of all devices, users, cloud instances, and SaaS apps, so you can easily identify coverage gaps and automate response actions. Axonius gives IT and security teams the confidence to control complexity by mitigating threats, navigating risk, decreasing incidents, and informing business-level strategy — all while eliminating manual, repetitive tasks. Visit axonius.com/darknet to learn more and try it free.
Support for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware! Learn more at www.threatlocker.com.
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account