• bitcoinBitcoin (BTC) $ 62,606.00
  • ethereumEthereum (ETH) $ 2,454.28
  • tetherTether (USDT) $ 0.999519
  • bnbBNB (BNB) $ 571.05
  • solanaSolana (SOL) $ 147.98
  • usd-coinUSDC (USDC) $ 0.999846
  • xrpXRP (XRP) $ 0.530310
  • staked-etherLido Staked Ether (STETH) $ 2,453.08
  • dogecoinDogecoin (DOGE) $ 0.110213
  • tronTRON (TRX) $ 0.162159
  • the-open-networkToncoin (TON) $ 5.18
  • cardanoCardano (ADA) $ 0.345187
  • avalanche-2Avalanche (AVAX) $ 29.13
  • shiba-inuShiba Inu (SHIB) $ 0.000017
  • wrapped-stethWrapped stETH (WSTETH) $ 2,903.06
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 62,555.00
  • wethWETH (WETH) $ 2,454.62
  • chainlinkChainlink (LINK) $ 10.69
  • bitcoin-cashBitcoin Cash (BCH) $ 321.27
  • suiSui (SUI) $ 2.27
  • polkadotPolkadot (DOT) $ 4.17
  • daiDai (DAI) $ 0.999754
  • uniswapUniswap (UNI) $ 7.65
  • nearNEAR Protocol (NEAR) $ 4.68
  • leo-tokenLEO Token (LEO) $ 6.06
  • aptosAptos (APT) $ 10.25
  • litecoinLitecoin (LTC) $ 64.57
  • bittensorBittensor (TAO) $ 652.19
  • wrapped-eethWrapped eETH (WEETH) $ 2,577.62
  • pepePepe (PEPE) $ 0.000010
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 1.45
  • internet-computerInternet Computer (ICP) $ 7.87
  • kaspaKaspa (KAS) $ 0.132671
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.995776
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.365948
  • moneroMonero (XMR) $ 150.08
  • ethereum-classicEthereum Classic (ETC) $ 18.46
  • stellarStellar (XLM) $ 0.090272
  • dogwifcoindogwifhat (WIF) $ 2.65
  • blockstackStacks (STX) $ 1.73
  • okbOKB (OKB) $ 41.47
  • immutable-xImmutable (IMX) $ 1.51
  • ethena-usdeEthena USDe (USDE) $ 0.998347
  • aaveAave (AAVE) $ 154.70
  • whitebitWhiteBIT Coin (WBT) $ 15.28
  • optimismOptimism (OP) $ 1.71
  • render-tokenRender (RENDER) $ 5.39
  • filecoinFilecoin (FIL) $ 3.56
  • crypto-com-chainCronos (CRO) $ 0.075757
  • injective-protocolInjective (INJ) $ 20.37
  • mantleMantle (MNT) $ 0.603025
  • hedera-hashgraphHedera (HBAR) $ 0.051051
  • arbitrumArbitrum (ARB) $ 0.523340
  • fantomFantom (FTM) $ 0.667178
  • vechainVeChain (VET) $ 0.022206
  • sei-networkSei (SEI) $ 0.489679
  • cosmosCosmos Hub (ATOM) $ 4.33
  • thorchainTHORChain (RUNE) $ 4.81
  • the-graphThe Graph (GRT) $ 0.165552
  • bitget-tokenBitget Token (BGB) $ 1.09
  • binance-peg-wethBinance-Peg WETH (WETH) $ 2,454.67
  • bonkBonk (BONK) $ 0.000021
  • rocket-pool-ethRocket Pool ETH (RETH) $ 2,750.56
  • flokiFLOKI (FLOKI) $ 0.000137
  • popcatPopcat (POPCAT) $ 1.35
  • celestiaCelestia (TIA) $ 6.07
  • theta-tokenTheta Network (THETA) $ 1.29
  • arweaveArweave (AR) $ 19.14
  • mantra-daoMANTRA (OM) $ 1.46
  • mantle-staked-etherMantle Staked Ether (METH) $ 2,562.40
  • pyth-networkPyth Network (PYTH) $ 0.324664
  • worldcoin-wldWorldcoin (WLD) $ 2.21
  • gatechain-tokenGate (GT) $ 9.16
  • makerMaker (MKR) $ 1,330.78
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 62,586.00
  • based-brettBrett (BRETT) $ 0.110366
  • jupiter-exchange-solanaJupiter (JUP) $ 0.797657
  • heliumHelium (HNT) $ 6.26
  • ondo-financeOndo (ONDO) $ 0.714729
  • algorandAlgorand (ALGO) $ 0.120870
  • matic-networkPolygon (MATIC) $ 0.365860
  • kucoin-sharesKuCoin (KCS) $ 8.13
  • ethenaEthena (ENA) $ 0.349525
  • quant-networkQuant (QNT) $ 64.91
  • lido-daoLido DAO (LDO) $ 1.05
  • jasmycoinJasmyCoin (JASMY) $ 0.018907
  • bitcoin-svBitcoin SV (BSV) $ 45.01
  • aerodrome-financeAerodrome Finance (AERO) $ 1.35
  • bittorrentBitTorrent (BTT) $ 0.00000091
  • galaGALA (GALA) $ 0.021840
  • fasttokenFasttoken (FTN) $ 2.56
  • coredaoorgCore (CORE) $ 0.914943
  • neiro-3Neiro (NEIRO) $ 0.001991
  • flowFlow (FLOW) $ 0.540664
  • spx6900SPX6900 (SPX) $ 0.886671
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 2,450.26
  • wormholeWormhole (W) $ 0.306257
  • starknetStarknet (STRK) $ 0.420756
  • notcoinNotcoin (NOT) $ 0.007946
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 2,508.10
  • beam-2Beam (BEAM) $ 0.015176
  • msolMarinade Staked SOL (MSOL) $ 181.42
  • conflux-tokenConflux (CFX) $ 0.168783
  • mog-coinMog Coin (MOG) $ 0.000002
  • usddUSDD (USDD) $ 0.996960
  • klay-tokenKlaytn (KLAY) $ 0.127643
  • ordinalsORDI (ORDI) $ 35.08
  • elrond-erd-2MultiversX (EGLD) $ 26.66
  • neoNEO (NEO) $ 10.35
  • flare-networksFlare (FLR) $ 0.014502
  • eosEOS (EOS) $ 0.470358
  • axie-infinityAxie Infinity (AXS) $ 4.65
  • mina-protocolMina Protocol (MINA) $ 0.606225
  • tezosTezos (XTZ) $ 0.689471
  • chilizChiliz (CHZ) $ 0.075705
  • tokenize-xchangeTokenize Xchange (TKX) $ 8.56
  • paypal-usdPayPal USD (PYUSD) $ 0.999624
  • nervos-networkNervos Network (CKB) $ 0.014965
  • ecasheCash (XEC) $ 0.000034
  • eigenlayerEigenlayer (EIGEN) $ 3.54
  • tether-goldTether Gold (XAUT) $ 2,649.80
  • pendlePendle (PENDLE) $ 4.03
  • fraxFrax (FRAX) $ 0.996815
  • axelarAxelar (AXL) $ 0.784038
  • the-sandboxThe Sandbox (SAND) $ 0.261543
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 62,544.00
  • akash-networkAkash Network (AKT) $ 2.45
  • turboTurbo (TURBO) $ 0.008735
  • dydx-chaindYdX (DYDX) $ 0.929578
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 2,517.75
  • cat-in-a-dogs-worldcat in a dogs world (MEW) $ 0.006703
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000028
  • aleoALEO (ALEO) $ 2.73
  • ethereum-name-serviceEthereum Name Service (ENS) $ 16.98
  • roninRonin (RON) $ 1.59
  • book-of-memeBOOK OF MEME (BOME) $ 0.008115
  • superfarmSuperVerse (SUPER) $ 1.23
  • nexoNEXO (NEXO) $ 0.989599
  • decentralandDecentraland (MANA) $ 0.294302
  • zcashZcash (ZEC) $ 35.60
  • dog-go-to-the-moon-runeDOG•GO•TO•THE•MOON (Runes) (DOG) $ 0.005368
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 62,510.00
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 2,454.52
  • pax-goldPAX Gold (PAXG) $ 2,662.02
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 2,452.69
  • pancakeswap-tokenPancakeSwap (CAKE) $ 1.82
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 154.65
  • beldexBeldex (BDX) $ 0.075880
  • aioz-networkAIOZ Network (AIOZ) $ 0.446009
  • arkhamArkham (ARKM) $ 1.80
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000087
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 2,654.19
  • blurBlur (BLUR) $ 0.254482
  • true-usdTrueUSD (TUSD) $ 0.996733
  • apecoinApeCoin (APE) $ 0.726031
  • dexeDeXe (DEXE) $ 8.54
  • raydiumRaydium (RAY) $ 1.83
  • zksyncZKsync (ZK) $ 0.130500
  • havvenSynthetix Network (SNX) $ 1.45
  • oasis-networkOasis (ROSE) $ 0.070545
  • safeSafe (SAFE) $ 0.956059
  • trust-wallet-tokenTrust Wallet (TWT) $ 1.12
  • gigachad-2Gigachad (GIGA) $ 0.048532
  • baby-doge-coinBaby Doge Coin (BABYDOGE) $ 0.00000000
  • gnosisGnosis (GNO) $ 174.45
  • layerzeroLayerZero (ZRO) $ 3.95
  • astarAstar (ASTR) $ 0.059560
  • bridged-usdc-polygon-pos-bridgeBridged USDC (Polygon PoS Bridge) (USDC.E) $ 0.999747
  • celoCelo (CELO) $ 0.797581
  • iotaIOTA (IOTA) $ 0.125181
  • livepeerLivepeer (LPT) $ 12.20
  • dydxdYdX (ETHDYDX) $ 0.929771
  • frax-etherFrax Ether (FRXETH) $ 2,452.52
  • xdce-crowd-saleXDC Network (XDC) $ 0.028166
  • metaplexMetaplex (MPLX) $ 0.422884
  • apenftAPENFT (NFT) $ 0.00000042
  • dogs-2Dogs (DOGS) $ 0.000789
  • theta-fuelTheta Fuel (TFUEL) $ 0.060597
  • usdbUSDB (USDB) $ 0.998940
  • l2-standard-bridged-weth-blastL2 Standard Bridged WETH (Blast) (WETH) $ 2,454.89
  • super-oethSuper OETH (SUPEROETHB) $ 2,454.65
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 62,637.00
  • constitutiondaoConstitutionDAO (PEOPLE) $ 0.077373
  • compound-governance-tokenCompound (COMP) $ 44.46
  • bitcoin-goldBitcoin Gold (BTG) $ 21.86
  • echelon-primeEchelon Prime (PRIME) $ 7.92
  • iotexIoTeX (IOTX) $ 0.040063
  • ondo-us-dollar-yieldOndo US Dollar Yield (USDY) $ 1.06
  • stepnGMT (GMT) $ 0.128747
  • osmosisOsmosis (OSMO) $ 0.544596
  • kavaKava (KAVA) $ 0.342613
  • ethereum-pow-iouEthereumPoW (ETHW) $ 3.43
  • binance-peg-busdBinance-Peg BUSD (BUSD) $ 0.998710
  • polygon-pos-bridged-weth-polygon-posPolygon PoS Bridged WETH (Polygon POS) (WETH) $ 2,455.65
  • dymensionDymension (DYM) $ 1.71
  • bitcoin-avalanche-bridged-btc-bBitcoin Avalanche Bridged (BTC.b) (BTC.B) $ 62,683.00
  • safepalSafePal (SFP) $ 0.707414
  • reserve-rights-tokenReserve Rights (RSR) $ 0.006503
  • harrypotterobamasonic10inHarryPotterObamaSonic10Inu (ETH) (BITCOIN) $ 0.335743
  • wemix-tokenWEMIX (WEMIX) $ 0.800959

Three DeFi hacks net $10 million in 48 hours despite ‘renaissance moment’

0 13

Three DeFi hacks net $10 million in 48 hours despite ‘renaissance moment’

  protos.com 27 September 2024 17:25, UTC

Three DeFi hacks net $10 million in 48 hours despite ‘renaissance moment’

Yesterday, two hacks on decentralized finance (DeFi) protocols netted a total of over $5 million, with a further $5 million siphoned off from compromised wallets on Wednesday.

While the founders of two OG protocols, Aave and Maker (now Sky), bro’d down over Starcraft while basking in a “DeFi renaissance moment,” some of the sector’s less well-established projects were going down in history for the wrong reasons.

Repeat DeFi hack or a new bug?

First up was Onyx Protocol whose $3.8 million loss was first thought to be a repeat of the well-known bug that drained $2.1 million from the project toward the back end of last year.

Onyx is a fork of Compound Finance, which contains an infamous vulnerability in which freshly-launched, empty lending markets are briefly left open to a price manipulation attack, if not handled correctly.

Given the popularity of Compound’s v2 codebase with fast-forking DeFi devs, the bug is exploited with alarming regularity across the sector, and was initially identified as having been the cause of Onyx’s latest loss.

However, as the team pointed out in a ‘post-mortem’ thread on X (formerly Twitter), this time the vulnerability also lay in the platform’s ‘NFT Liquidation contract.’ The attacker was able to drain the vUSD stablecoin which was then sold off, causing it to depeg.

Something’s not adding up

Next came ‘bitcoin restaking’ protocol Bedrock which appeared to be overly bullish on ETH, costing it around $2 million.

The faulty code allowed users to mint Bedrock’s uniBTC token at a 1:1 ratio with staked ETH tokens, not taking into account the price difference between the two assets (valued at the time at approximately $65,000 vs $2,650, respectively).

The uniBTC tokens were then sold off for an alternative wrapped bitcoin token, for a return of almost 25x.

Crypto security auditor Dedaub claims to have identified the vulnerability in advance, stating that such a simple bug could be discovered and exploited automatically by ‘fuzzing bots.’

Despite warning the Bedrock team two hours before the attack, there was no response due time zone differences. However, by raising the issue separately with Pendle, a platform with $30 million of exposure to uniBTC, further losses were successfully averted.

The Bedrock team responded to the incident, reassuring users that all uniBTC collateral remains intact. It estimated the losses at “approximately $2 million (mostly in DEX LPs),” adding that a “comprehensive reimbursement plan is being finalized.”

Compromised keys?

On Wednesday, real-world-asset-focused Truflation warned of “some abnormal activity,” which it attributed to a malware attack.

Blockchain investigator ZachXBT traced total losses of over $5 million from addresses identified as the project’s “treasury multisig and personal wallets,” providing a list of addresses via his Investigations Telegram channel.

While the initial disclosure was scant on details, it does mention a reward to any whitehats able to aid the investigation. This was followed up with an on-chain message to the hacker, offering a 10% ‘bounty’ for the return of the funds.

Assuming funds aren’t returned before 8am (UTC) on Saturday, the bounty will be opened up to the public in return for information leading to a conviction.

Source

Leave A Reply

Your email address will not be published.