• bitcoinBitcoin (BTC) $ 67,689.00
  • ethereumEthereum (ETH) $ 3,274.07
  • tetherTether (USDT) $ 1.00
  • bnbBNB (BNB) $ 593.51
  • solanaSolana (SOL) $ 150.98
  • usd-coinUSDC (USDC) $ 1.00
  • staked-etherLido Staked Ether (STETH) $ 3,262.76
  • xrpXRP (XRP) $ 0.545498
  • dogecoinDogecoin (DOGE) $ 0.172228
  • the-open-networkToncoin (TON) $ 6.74
  • cardanoCardano (ADA) $ 0.505947
  • avalanche-2Avalanche (AVAX) $ 38.54
  • shiba-inuShiba Inu (SHIB) $ 0.000025
  • bitcoin-cashBitcoin Cash (BCH) $ 533.50
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 67,679.00
  • tronTRON (TRX) $ 0.114227
  • polkadotPolkadot (DOT) $ 7.14
  • chainlinkChainlink (LINK) $ 15.01
  • matic-networkPolygon (MATIC) $ 0.759034
  • litecoinLitecoin (LTC) $ 85.60
  • internet-computerInternet Computer (ICP) $ 13.56
  • nearNEAR Protocol (NEAR) $ 5.76
  • uniswapUniswap (UNI) $ 7.90
  • leo-tokenLEO Token (LEO) $ 5.76
  • daiDai (DAI) $ 0.999497
  • aptosAptos (APT) $ 10.11
  • ethereum-classicEthereum Classic (ETC) $ 29.25
  • first-digital-usdFirst Digital USD (FDUSD) $ 1.00
  • blockstackStacks (STX) $ 2.69
  • mantleMantle (MNT) $ 1.18
  • crypto-com-chainCronos (CRO) $ 0.137765
  • filecoinFilecoin (FIL) $ 6.64
  • cosmosCosmos Hub (ATOM) $ 8.99
  • bittensorBittensor (TAO) $ 517.71
  • stellarStellar (XLM) $ 0.113753
  • vechainVeChain (VET) $ 0.044390
  • okbOKB (OKB) $ 53.35
  • render-tokenRender (RNDR) $ 8.11
  • arbitrumArbitrum (ARB) $ 1.17
  • immutable-xImmutable (IMX) $ 2.16
  • hedera-hashgraphHedera (HBAR) $ 0.085844
  • kaspaKaspa (KAS) $ 0.126085
  • dogwifcoindogwifhat (WIF) $ 2.78
  • makerMaker (MKR) $ 2,946.80
  • the-graphThe Graph (GRT) $ 0.267486
  • pepePepe (PEPE) $ 0.000006
  • optimismOptimism (OP) $ 2.41
  • injective-protocolInjective (INJ) $ 26.79
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • theta-tokenTheta Network (THETA) $ 2.33
  • fetch-aiFetch.ai (FET) $ 2.20
  • wrapped-eethWrapped eETH (WEETH) $ 3,384.11
  • moneroMonero (XMR) $ 124.91
  • fantomFantom (FTM) $ 0.738255
  • rocket-pool-ethRocket Pool ETH (RETH) $ 3,615.08
  • thorchainTHORChain (RUNE) $ 5.61
  • arweaveArweave (AR) $ 27.96
  • galaGALA (GALA) $ 0.048585
  • lido-daoLido DAO (LDO) $ 2.03
  • bitget-tokenBitget Token (BGB) $ 1.27
  • ethenaEthena (ENA) $ 1.20
  • celestiaCelestia (TIA) $ 9.75
  • mantle-staked-etherMantle Staked Ether (METH) $ 3,356.87
  • suiSui (SUI) $ 1.22
  • algorandAlgorand (ALGO) $ 0.188824
  • flokiFLOKI (FLOKI) $ 0.000158
  • quant-networkQuant (QNT) $ 104.56
  • bitcoin-svBitcoin SV (BSV) $ 76.86
  • flowFlow (FLOW) $ 1.01
  • sei-networkSei (SEI) $ 0.551692
  • jupiter-exchange-solanaJupiter (JUP) $ 1.08
  • coredaoorgCore (CORE) $ 1.62
  • aaveAave (AAVE) $ 96.48
  • beam-2Beam (BEAM) $ 0.026709
  • bittorrentBitTorrent (BTT) $ 0.000001
  • neoNEO (NEO) $ 19.08
  • ribbon-financeRibbon Finance (RBN) $ 1.38
  • whitebitWhiteBIT Coin (WBT) $ 9.20
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 3,258.06
  • flare-networksFlare (FLR) $ 0.033314
  • ordinalsORDI (ORDI) $ 60.53
  • nervos-networkNervos Network (CKB) $ 0.028191
  • ecasheCash (XEC) $ 0.000061
  • zebec-protocolZebec Network (ZBCN) $ 0.023852
  • tokenize-xchangeTokenize Xchange (TKX) $ 14.73
  • bonkBonk (BONK) $ 0.000017
  • elrond-erd-2MultiversX (EGLD) $ 42.80
  • ondo-financeOndo (ONDO) $ 0.777041
  • axie-infinityAxie Infinity (AXS) $ 7.90
  • wormholeWormhole (W) $ 0.627037
  • singularitynetSingularityNET (AGIX) $ 0.872132
  • the-sandboxThe Sandbox (SAND) $ 0.492214
  • jasmycoinJasmyCoin (JASMY) $ 0.022784
  • dydx-chaindYdX (DYDX) $ 2.34
  • starknetStarknet (STRK) $ 1.47
  • tezosTezos (XTZ) $ 1.09
  • conflux-tokenConflux (CFX) $ 0.268849
  • chilizChiliz (CHZ) $ 0.116499
  • havvenSynthetix Network (SNX) $ 3.15
  • eosEOS (EOS) $ 0.884702
  • roninRonin (RON) $ 3.23
  • worldcoin-wldWorldcoin (WLD) $ 5.38
  • gatechain-tokenGate (GT) $ 7.46
  • kucoin-sharesKuCoin (KCS) $ 10.03
  • msolMarinade staked SOL (MSOL) $ 178.59
  • pyth-networkPyth Network (PYTH) $ 0.630952
  • cheeleeCheelee (CHEEL) $ 16.46
  • decentralandDecentraland (MANA) $ 0.497851
  • gnosisGnosis (GNO) $ 351.40
  • mina-protocolMina Protocol (MINA) $ 0.830847
  • heliumHelium (HNT) $ 5.33
  • aerodrome-financeAerodrome Finance (AERO) $ 2.13
  • akash-networkAkash Network (AKT) $ 3.66
  • apecoinApeCoin (APE) $ 1.31
  • pancakeswap-tokenPancakeSwap (CAKE) $ 3.25
  • iotaIOTA (IOTA) $ 0.255291
  • kavaKava (KAVA) $ 0.753203
  • dexeDeXe (DEXE) $ 13.79
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 3,304.04
  • echelon-primeEchelon Prime (PRIME) $ 20.63
  • frax-etherFrax Ether (FRXETH) $ 3,256.58
  • nexoNEXO (NEXO) $ 1.32
  • klay-tokenKlaytn (KLAY) $ 0.203607
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000035
  • usddUSDD (USDD) $ 0.995048
  • dydxdYdX (ETHDYDX) $ 2.34
  • axelarAxelar (AXL) $ 1.15
  • aioz-networkAIOZ Network (AIOZ) $ 0.659902
  • mantra-daoMANTRA (OM) $ 0.876517
  • swethSwell Ethereum (SWETH) $ 3,436.56
  • bitcoin-goldBitcoin Gold (BTG) $ 39.90
  • corgiaiCorgiAI (CORGIAI) $ 0.002034
  • pups-ordinalsPUPS (Ordinals) (PUPS) $ 89.43
  • lido-staked-solLido Staked SOL (STSOL) $ 178.03
  • oasis-networkOasis Network (ROSE) $ 0.102206
  • osmosisOsmosis (OSMO) $ 1.03
  • illuviumIlluvium (ILV) $ 104.02
  • fraxFrax (FRAX) $ 0.998628
  • radixRadix (XRD) $ 0.061111
  • blurBlur (BLUR) $ 0.414477
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000107
  • dymensionDymension (DYM) $ 3.80
  • altlayerAltLayer (ALT) $ 0.492160
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 3,483.76
  • astarAstar (ASTR) $ 0.109000
  • based-brettBrett (BRETT) $ 0.072463
  • pendlePendle (PENDLE) $ 6.26
  • woo-networkWOO (WOO) $ 0.319292
  • theta-fuelTheta Fuel (TFUEL) $ 0.089920
  • tether-goldTether Gold (XAUT) $ 2,345.22
  • iotexIoTeX (IOTX) $ 0.061221
  • wemix-tokenWEMIX (WEMIX) $ 1.61
  • curve-dao-tokenCurve DAO (CRV) $ 0.483869
  • book-of-memeBOOK OF MEME (BOME) $ 0.010220
  • manta-networkManta Network (MANTA) $ 2.23
  • fasttokenFasttoken (FTN) $ 1.79
  • xdce-crowd-saleXDC Network (XDC) $ 0.039612
  • 1inch1inch (1INCH) $ 0.464324
  • staked-frax-etherStaked Frax Ether (SFRXETH) $ 3,525.40
  • ocean-protocolOcean Protocol (OCEAN) $ 0.877853
  • mx-tokenMX (MX) $ 5.38
  • skaleSKALE (SKL) $ 0.101149
  • ether-fiEther.fi (ETHFI) $ 4.45
  • enjincoinEnjin Coin (ENJ) $ 0.356485
  • true-usdTrueUSD (TUSD) $ 1.00
  • stepnGMT (GMT) $ 0.256781
  • zilliqaZilliqa (ZIL) $ 0.027309
  • project-galaxyGalxe (GAL) $ 4.70
  • memecoin-2Memecoin (MEME) $ 0.031964
  • apenftAPENFT (NFT) $ 0.00000049
  • ankrAnkr Network (ANKR) $ 0.047860
  • ravencoinRavencoin (RVN) $ 0.034636
  • terra-luna-2Terra (LUNA) $ 0.687501
  • trust-wallet-tokenTrust Wallet (TWT) $ 1.12
  • celoCelo (CELO) $ 0.868321
  • siacoinSiacoin (SC) $ 0.008145
  • ethereum-name-serviceEthereum Name Service (ENS) $ 14.81
  • polymeshPolymesh (POLYX) $ 0.438844
  • 0x0x Protocol (ZRX) $ 0.540847
  • qtumQtum (QTUM) $ 4.35
  • rocket-poolRocket Pool (RPL) $ 22.61
  • holotokenHolo (HOT) $ 0.002554
  • compound-wrapped-btccWBTC (CWBTC) $ 1,359.48
  • biconomyBiconomy (BICO) $ 0.593442
  • ethereum-pow-iouEthereumPoW (ETHW) $ 4.09
  • amp-tokenAmp (AMP) $ 0.007903
  • pax-goldPAX Gold (PAXG) $ 2,387.25
  • jeo-bodenJeo Boden (BODEN) $ 0.621641
  • raydiumRaydium (RAY) $ 1.66
  • frax-shareFrax Share (FXS) $ 5.48
  • superfarmSuperVerse (SUPER) $ 0.941401
  • aelfaelf (ELF) $ 0.572267
  • basic-attention-tokenBasic Attention (BAT) $ 0.274047
  • stader-ethxStader ETHx (ETHX) $ 3,347.56
  • golemGolem (GLM) $ 0.409638
  • origintrailOriginTrail (TRAC) $ 1.00
  • jito-governance-tokenJito (JTO) $ 3.43
  • livepeerLivepeer (LPT) $ 12.46
  • casper-networkCasper Network (CSPR) $ 0.032690
  • safepalSafePal (SFP) $ 0.843056

WOOFi Swap Exploited With $8.75m Flash Loan Attack; 10% Bounty Offered for Negotiation

0 23

WOOFi Swap Exploited With $8.75m Flash Loan Attack; 10% Bounty Offered for Negotiation

  coinpedia.org 3 h

WOOFi Swap Exploited With $8.75m Flash Loan Attack; 10% Bounty Offered for Negotiation

Hackers, in their latest spree hacked the sPMM algorithm, the core of the WOOFi Swap price mechanism on the Arbitrum network on March 5th using a smart pattern of flash loans to severely manipulate the value of WOO tokens, sending the token value too low nearly to zero. Swift action from the team just within 13 minutes, stopped the stolen amount to $8.5 Million from further increasing.

Independent on-chain investigator, Spreek found the unusual transactions and immediately notified the WooFiteam. As a response, the team paused the affected pools and promised to bring them back fully functional within two weeks.

Heads up: we’ve paused these pools. We will follow up shortly with more updates. https://t.co/BlGEo3iYUf

— WOOFi (@_WOOFi) March 5, 2024

Hackers tactics in attacking the pool

According to the post-mortem released by the team, The exploiter borrowed 7.7 Million WOO as well as some other assets and sold the WOO into WOOFi. At this point, WOOFi’s sPMM incorrectly adjusted WOO to an extreme price which was close to zero.

The exploiter then swapped out 10M WOO in the same transaction with almost no cost. The exploiter repeated this attack 3 times within a very short period, which netted about $8.75m in profits after returning the flash loans.

WooFi faces first breach since its release

Unlike the rest of WOOFi so far has not had any problems despite its launch in 2021, things were different in this latest development. The integration of lending markets for WOO in Arbitrum along with the relatively low levels of liquidity elsewhere created an opportunity for the hacking.

Even though WOOFiSwap was deployed across 10+ networks, the nonexistence of both the WOO token and the WOO lending market in other chains worked as a barrier to reproducing the exploits.

3/ We have already initiated efforts to retrieve these funds, with a 10% whitehat bounty extended to the exploiter. Additionally, a bounty has been placed on @ArkhamIntel for anyone who can provide additional information.https://t.co/oSG0CQa4oP

— WOOFi (@_WOOFi) March 5, 2024

Conclusion:

As of writing the team is putting huge efforts to recover the lost funds. With a generous 10% white hat bounty, they have sent an on-chain message to the hacker for negotiation. Together with that, a bounty has been placed on Arkham Intelligence for any valuable information leading to hackers.

Stay tuned for more information as the investigation unfolds!

Source

Leave A Reply

Your email address will not be published.