DiutoCoinNews

Bitcoin, Cryptocurrency News in Nigeria And Africa

DiutoCoinNews Markets
CRYPTO AND CYBER SECURITY NEWS NEWS

$24 Million Lost in Another DeFi Flashloan Economic Attack.

Share this:

Harvest Finance a DeFi based project developed under Kava Blockchain has been attacked in a recent flashloan economic attack resulting in a $24 million loss off the protocol.

The error was an engineering problem which Harvest Finance would have avoided if proper steps was taken to mitigate possible loan exploitation by attackers on the flashloan pool.

What Happened?

“Like other arbitrage economic attacks, this one originated with a large flashloan, and manipulated prices on one money lego (curve y pool) to drain another money lego (fUSDT, fUSDC), many times.

The attacker then converted the funds to renBTC and exited to BTC. Like other flashloan attacks, the attacker did not give time to respond, performing the attack in 7 minutes end to end.

Wallet of the attacker exiting through renBTC gathered from @devops199fan can be seen here with transaction details. The economic attack was performed through the curve y pool, stretching the price of the stablecoins in Curve out of proportion and depositing and withdrawing a large amount of assets through harvest.”

Read Also: Trezor Wallet User Loses Funds to Hackers Despite Keeping the Seed Phrase Safe

Harvest Finance responded impromptu to the attack to protect users by pulling the y pool and btc curve strategy funds to the vault. Currently, all Stablecoin and BTC funds are in the vault (not deployed in a strategy). No other pools was affected.

Though currently, over two million USD has been reportedly returned by the attacker through USDT and USDC. The Harvest Finance team has opened a $100,000 bounty campaign to help get the attacker to return the funds he pulled out.

According to Harvest Finance, the flashloan economic attacker is actively money laundering the BTC through:

  • Flugsvamp 3.0
  • wm_cash
  • Coins.ph
  • Treddr
  • Kraken
  • Binance
  • Huobi

There is currently a $100,000 bounty campaign up for anyone who can help in returning the funds back to the pool.

Register On Binance

 

Copyright DiutoCoinNews

All rights reserved. This material and any other digital content on this platform may not be reproduced, published, broadcast, written or distributed in full or in part, without written permission from  DiutoCoinNews.

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments
Diutocoinnews Admin. Send all publications to info@diutocoinnews.com.ng
0
Would love your thoughts, please comment.x
()
x