Posts

Showing posts with the label exploit

Arcadia Finance hacker used reentrancy exploit, team demands return of funds

In a post-mortem report, Arcadia Finance developers said an attacker stole funds by liquidating a vault before it could perform a health check, interrupting the app’s normal flow of operations. The Arcadia Finance attacker used a reentrancy exploit to drain $455,000 from the decentralized finance (DeFi) protocol, according to a July 10 post-mortem report issued by the app’s development team. A “reentrancy exploit” is a bug that allows an attacker to “reenter” a contract or interrupt it during a multi-step process, preventing the process from being completed correctly. The team has sent a message to the attacker demanding the return of funds within 24 hours and threatening police action if the hacker fails to comply. Post Mortem of ongoing situation, providing a technical overview and sharing more information on next steps.https://t.co/NPNbbSzKBQ — Arcadia Finance (@ArcadiaFi) July 10, 2023 Arcadia Finance was exploit ed on the morning of July 10 and drained of $455,000 worth of...

Allbridge offers bounty to exploiter who stole $570K in flashloan attack

Allbridge offered a hacker who pilfered $573,000 from its platform a chance to come forward as a white hat and forgo any legal ramifications. The attacker behind a $573,000 exploit on the multi-chain token bridge, Allbridge, has been offered a chance by the firm to come forward as a white hat and claim a bounty. Blockchain security firm Peckshield first identified the attack on April 1, warning Allbridge in a tweet that its BNB Chain pools swap price was being manipulated by an individual acting as a liquidity provider and swapper, which allowed them to drain the pool of $282,889 in Binance USD (BUSD) and $290,868 worth of Tether (USDT). In an April 1 tweet following the hack, Allbridge offered an olive branch to the attacker in the form of an undisclosed bounty and the chance to escape any legal ramifications. To hacker's attention: addressing the incident and the next steps 1. We continue monitoring the wallets, transactions, and linked CEX accounts of individuals involved in t...

Euler Finance exploiter returns over 58,000 stolen Ether

Image
ETH worth over $101 million had been returned to the lending protocol as of March 25. The exploiter still controls part of the stolen assets. The hacker behind the $196 million exploit on lending protocol Euler Finance has returned the majority of the stolen assets, according to on-chain data.  In a transaction on March 25, the exploit er return ed 51,000 Ether (ETH) worth around $88 million at the time of writing. A second transfer of 7,737 ETH was made on the same day, worth over $13 million. Previously, on March 18, the hacker sent 3,000 ETH to the protocol, worth nearly $5.4 million at the time. The exploit er still controls some of the stole n assets. the euler exploiter has returned 51k ETH ($90m) https://t.co/RooIjugGsd — ekin (@eking0x) March 25, 2023 On March 13, the hacker carried out multiple transactions stealing nearly $196 million from the protocol in a flash loan attack, dubbed the largest DeFi hack of 2023 so far. Stolen assets include 8.8 million DAI, 849,000 ...