Arbitrum-Based Liquidity Protocol Exploited For $7.5M

The Arbitrum-based Jimbos Protocol has been exploited for 4090 ETH worth $7.5 million three days after its version 2 launch.

PeckShield reported the hack was enabled by the protocol’s lack of control over slippage for the tokens under its control.

Hacker used $5.9 million flash loan to exploit Arbitrum-based protocol

This hack is due to the lack of slippage control of liquidity-shifting operations — such that the protocol-owned liquidity is invested into a skewed/imbalanced price range, which is exploited in reverse swap for profit, PeckShield reported.

The liquidity protocol hacker made use of a $5.9 million flash loan to carry out the attack.

“We are aware of the exploit regarding our protocol and are actively in contact with law enforcement and security professionals. We will release further information when possible,” Jimbos Protocol tweeted.

Token’s price falls 25%

The Arbitrum-based Jimbos Protocol was initially launched on May 16. But shortly after its launch, a smart contract bug halted the protocol from working. Users were told to not interact with version 1 and wait for version 2.

The token’s price has fallen 25% from $0.25 to $0.29 after the hack of the version 2.

Source