• bitcoinBitcoin (BTC) $ 67,165.00
  • ethereumEthereum (ETH) $ 3,471.44
  • tetherTether (USDT) $ 0.998945
  • bnbBNB (BNB) $ 593.03
  • solanaSolana (SOL) $ 178.71
  • staked-etherLido Staked Ether (STETH) $ 3,468.84
  • xrpXRP (XRP) $ 0.607137
  • usd-coinUSDC (USDC) $ 0.998473
  • dogecoinDogecoin (DOGE) $ 0.137662
  • the-open-networkToncoin (TON) $ 6.98
  • cardanoCardano (ADA) $ 0.432062
  • avalanche-2Avalanche (AVAX) $ 31.65
  • tronTRON (TRX) $ 0.134231
  • shiba-inuShiba Inu (SHIB) $ 0.000018
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 67,233.00
  • polkadotPolkadot (DOT) $ 6.26
  • chainlinkChainlink (LINK) $ 14.12
  • bitcoin-cashBitcoin Cash (BCH) $ 387.47
  • nearNEAR Protocol (NEAR) $ 6.14
  • uniswapUniswap (UNI) $ 7.90
  • litecoinLitecoin (LTC) $ 72.46
  • daiDai (DAI) $ 0.998449
  • leo-tokenLEO Token (LEO) $ 5.75
  • pepePepe (PEPE) $ 0.000012
  • wrapped-eethWrapped eETH (WEETH) $ 3,623.21
  • matic-networkPolygon (MATIC) $ 0.537296
  • internet-computerInternet Computer (ICP) $ 10.24
  • kaspaKaspa (KAS) $ 0.174602
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 1.41
  • ethereum-classicEthereum Classic (ETC) $ 23.43
  • aptosAptos (APT) $ 7.34
  • ethena-usdeEthena USDe (USDE) $ 0.999777
  • stellarStellar (XLM) $ 0.105035
  • moneroMonero (XMR) $ 161.61
  • mantleMantle (MNT) $ 0.879376
  • dogwifcoindogwifhat (WIF) $ 2.82
  • blockstackStacks (STX) $ 1.87
  • render-tokenRender (RENDER) $ 6.83
  • filecoinFilecoin (FIL) $ 4.59
  • makerMaker (MKR) $ 2,802.14
  • arbitrumArbitrum (ARB) $ 0.776403
  • injective-protocolInjective (INJ) $ 26.59
  • hedera-hashgraphHedera (HBAR) $ 0.072025
  • crypto-com-chainCronos (CRO) $ 0.093779
  • cosmosCosmos Hub (ATOM) $ 6.35
  • okbOKB (OKB) $ 41.15
  • immutable-xImmutable (IMX) $ 1.60
  • vechainVeChain (VET) $ 0.029899
  • bittensorBittensor (TAO) $ 331.63
  • optimismOptimism (OP) $ 1.92
  • bonkBonk (BONK) $ 0.000031
  • suiSui (SUI) $ 0.839800
  • arweaveArweave (AR) $ 32.19
  • the-graphThe Graph (GRT) $ 0.209612
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.989656
  • rocket-pool-ethRocket Pool ETH (RETH) $ 3,891.98
  • flokiFLOKI (FLOKI) $ 0.000198
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 3,519.94
  • mantle-staked-etherMantle Staked Ether (METH) $ 3,601.99
  • lido-daoLido DAO (LDO) $ 1.85
  • bitget-tokenBitget Token (BGB) $ 1.16
  • thorchainTHORChain (RUNE) $ 4.74
  • notcoinNotcoin (NOT) $ 0.015374
  • theta-tokenTheta Network (THETA) $ 1.57
  • ondo-financeOndo (ONDO) $ 1.05
  • celestiaCelestia (TIA) $ 7.45
  • whitebitWhiteBIT Coin (WBT) $ 10.17
  • fantomFantom (FTM) $ 0.517628
  • jasmycoinJasmyCoin (JASMY) $ 0.029253
  • coredaoorgCore (CORE) $ 1.57
  • aaveAave (AAVE) $ 94.79
  • based-brettBrett (BRETT) $ 0.141543
  • jupiter-exchange-solanaJupiter (JUP) $ 1.04
  • pyth-networkPyth Network (PYTH) $ 0.356318
  • algorandAlgorand (ALGO) $ 0.152434
  • sei-networkSei (SEI) $ 0.390902
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 3,484.17
  • mantra-daoMANTRA (OM) $ 1.31
  • quant-networkQuant (QNT) $ 74.46
  • gatechain-tokenGate (GT) $ 7.81
  • elrond-erd-2MultiversX (EGLD) $ 37.14
  • beam-2Beam (BEAM) $ 0.019457
  • flowFlow (FLOW) $ 0.630201
  • msolMarinade Staked SOL (MSOL) $ 215.59
  • galaGALA (GALA) $ 0.025830
  • kucoin-sharesKuCoin (KCS) $ 9.80
  • axie-infinityAxie Infinity (AXS) $ 6.16
  • bitcoin-svBitcoin SV (BSV) $ 45.81
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 3,531.56
  • flare-networksFlare (FLR) $ 0.019949
  • eosEOS (EOS) $ 0.589347
  • tokenize-xchangeTokenize Xchange (TKX) $ 11.05
  • popcatPopcat (POPCAT) $ 0.893734
  • ordinalsORDI (ORDI) $ 41.36
  • akash-networkAkash Network (AKT) $ 3.61
  • dydx-chaindYdX (DYDX) $ 1.43
  • bittorrentBitTorrent (BTT) $ 0.00000089
  • ethereum-name-serviceEthereum Name Service (ENS) $ 26.09
  • heliumHelium (HNT) $ 5.02
  • neoNEO (NEO) $ 11.61
  • mog-coinMog Coin (MOG) $ 0.000002
  • ethenaEthena (ENA) $ 0.463911
  • starknetStarknet (STRK) $ 0.593168
  • tezosTezos (XTZ) $ 0.781935
  • roninRonin (RON) $ 2.29
  • the-sandboxThe Sandbox (SAND) $ 0.336028
  • usddUSDD (USDD) $ 0.998740
  • fasttokenFasttoken (FTN) $ 2.28
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 3,734.12
  • cat-in-a-dogs-worldcat in a dogs world (MEW) $ 0.008106
  • conflux-tokenConflux (CFX) $ 0.169200
  • nexoNEXO (NEXO) $ 1.26
  • ecasheCash (XEC) $ 0.000035
  • zksyncZKsync (ZK) $ 0.188662
  • worldcoin-wldWorldcoin (WLD) $ 2.42
  • frax-etherFrax Ether (FRXETH) $ 3,482.14
  • gnosisGnosis (GNO) $ 256.69
  • pendlePendle (PENDLE) $ 4.19
  • zebec-protocolZebec Protocol (ZBC) $ 0.012945
  • decentralandDecentraland (MANA) $ 0.346994
  • chilizChiliz (CHZ) $ 0.072768
  • fraxFrax (FRAX) $ 0.995009
  • mina-protocolMina Protocol (MINA) $ 0.565025
  • book-of-memeBOOK OF MEME (BOME) $ 0.009257
  • raydiumRaydium (RAY) $ 2.41
  • oasis-networkOasis Network (ROSE) $ 0.093811
  • wormholeWormhole (W) $ 0.336275
  • havvenSynthetix Network (SNX) $ 1.84
  • aioz-networkAIOZ Network (AIOZ) $ 0.540395
  • tether-goldTether Gold (XAUT) $ 2,392.73
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000028
  • layerzeroLayerZero (ZRO) $ 5.24
  • iotaIOTA (IOTA) $ 0.172904
  • swethSwell Ethereum (SWETH) $ 3,689.72
  • dexeDeXe (DEXE) $ 10.05
  • paypal-usdPayPal USD (PYUSD) $ 1.00
  • nervos-networkNervos Network (CKB) $ 0.012744
  • apecoinApeCoin (APE) $ 0.834963
  • klay-tokenKlaytn (KLAY) $ 0.151726
  • astarAstar (ASTR) $ 0.077384
  • safeSafe (SAFE) $ 1.28
  • livepeerLivepeer (LPT) $ 16.29
  • axelarAxelar (AXL) $ 0.738016
  • staked-frax-etherStaked Frax Ether (SFRXETH) $ 3,786.17
  • 1inch1inch (1INCH) $ 0.424202
  • aerodrome-financeAerodrome Finance (AERO) $ 0.916250
  • true-usdTrueUSD (TUSD) $ 0.997534
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000090
  • turboTurbo (TURBO) $ 0.006958
  • illuviumIlluvium (ILV) $ 71.95
  • iotexIoTeX (IOTX) $ 0.050565
  • zcashZcash (ZEC) $ 31.48
  • theta-fuelTheta Fuel (TFUEL) $ 0.071582
  • pancakeswap-tokenPancakeSwap (CAKE) $ 2.06
  • wemix-tokenWEMIX (WEMIX) $ 1.15
  • aevo-exchangeAevo (AEVO) $ 0.545761
  • dog-go-to-the-moon-runeDOG•GO•TO•THE•MOON (Runes) (DOG) $ 0.004544
  • kavaKava (KAVA) $ 0.421249
  • bitcoin-goldBitcoin Gold (BTG) $ 25.88
  • stader-ethxStader ETHx (ETHX) $ 3,590.07
  • xdce-crowd-saleXDC Network (XDC) $ 0.029877
  • pax-goldPAX Gold (PAXG) $ 2,390.98
  • project-galaxyGalxe (GAL) $ 3.67
  • trust-wallet-tokenTrust Wallet (TWT) $ 1.04
  • apenftAPENFT (NFT) $ 0.00000043
  • g-tokenGravity (G) $ 0.058503
  • constitutiondaoConstitutionDAO (PEOPLE) $ 0.082544
  • usdbUSDB (USDB) $ 1.00
  • woo-networkWOO (WOO) $ 0.207462
  • h2o-daoH2O Dao (H2O) $ 0.476345
  • mx-tokenMX (MX) $ 4.00
  • singularitynetSingularityNET (AGIX) $ 0.612130
  • manta-networkManta Network (MANTA) $ 1.04
  • arkhamArkham (ARKM) $ 1.57
  • safepalSafePal (SFP) $ 0.817860
  • compound-ethercETH (CETH) $ 69.70
  • memecoin-2Memecoin (MEME) $ 0.016531
  • blurBlur (BLUR) $ 0.209891
  • rocket-poolRocket Pool (RPL) $ 17.93
  • dymensionDymension (DYM) $ 1.91
  • osmosisOsmosis (OSMO) $ 0.534706
  • aragonAragon (ANT) $ 8.95
  • stepnGMT (GMT) $ 0.156128
  • echelon-primeEchelon Prime (PRIME) $ 8.30
  • compound-governance-tokenCompound (COMP) $ 51.16
  • kusamaKusama (KSM) $ 22.79
  • corgiaiCorgiAI (CORGIAI) $ 0.001010
  • golemGolem (GLM) $ 0.346845
  • jito-governance-tokenJito (JTO) $ 2.75
  • ponkePONKE (PONKE) $ 0.620673
  • curve-dao-tokenCurve DAO (CRV) $ 0.277797
  • enjincoinEnjin Coin (ENJ) $ 0.199620
  • holotokenHolo (HOT) $ 0.001859
  • zilliqaZilliqa (ZIL) $ 0.017626
  • dydxdYdX (ETHDYDX) $ 1.43
  • blastBlast (BLAST) $ 0.018051
  • dashDash (DASH) $ 27.10
  • 0x0x Protocol (ZRX) $ 0.377093
  • pepecoin-2PepeCoin (PEPECOIN) $ 2.70
  • celoCelo (CELO) $ 0.588902

Level Finance confirms $1M exploit due to buggy smart contract

0 192

Level Finance confirms $1M exploit due to buggy smart contract

Decentralized exchange Level Finance has experienced a security breach allowing an attacker to steal more than $1 million of the exchange’s native Level Finance (LVL) token.

Level Finance informed its 20,000 Twitter followers that more than 214,000 of the exchange’s LVL tokens had been drained and swapped into 3,345 Binance Coin (BNB), with an approximate value of $1.01 million.

An exploit targeted our Referral Controller Contract.

— 214k LVL tokens drained to exploiters address.
— Attacker swapped LVL to 3,345 BNB
— Exploit was isolated from other contracts.
— Fix to be deployed in 12 Hrs.
— LP’s and DAO treasury UNAFFECTED.

More details to follow.

— LEVEL Finance #RealYield (@Level__Finance) May 1, 2023

According to blockchain security firm Peckshield, Level Finance’s “LevelReferralControllerV2” smart contract contained a bug that allowed for “repeated referral claims” from the same epoch. This was confirmed by Level Finance in a later statement made on Discord.

It seems the @Level__Finance’s LevelReferralControllerV2 contract has a bug that allows for repeated referral claims from the same epoch. So far 214k LVLs have been drained and swapped into 3,345 BNB (~1M)

Here is an example hack tx: https://t.co/isqHhzFk1Z https://t.co/ikOWx2ezf6 pic.twitter.com/wlr5bFFf0R

— PeckShield Inc. (@peckshield) May 1, 2023

Meanwhile, data from Binance chain explorer BSC Scan, the V2 controller contract shows multiple calls of the “claim multiple” function over the past 48 hours.

At the time of writing, the implementation of the contract does not appear to have been altered since the advent of the attack, however Level Finance says that it will deploy a new implementation of the referral contract within the next 12 hours.

The exchange also noted that its liquidity pools and related DAOs remain unaffected by the attack.

According to @DeDotFiSecurity on Twitter, the team says that it has “temporarily shut down the referral program,” which has stopped the exploit.

Level Finance confirms $1M exploit due to buggy smart contract

On Discord, Level Finance said that the exploit had been isolated from other exploits and that users of the exchange should “stand by for a full post mortem.”

Source

Leave A Reply

Your email address will not be published.