Posts

Showing posts with the label exploit

Three DeFi hacks net $10 million in 48 hours despite ‘renaissance moment’

Yesterday, two hacks on decentralized finance (DeFi) protocols netted a total of over $5 million, with a further $5 million siphoned off from compromised wallets on Wednesday. While the founders of two OG protocols, Aave and Maker (now Sky), bro’d down over Starcraft while basking in a “DeFi renaissance moment,” some of the sector’s less well-established projects were going down in history for the wrong reasons. Repeat DeFi hack or a new bug? First up was Onyx Protocol whose $3.8 million loss was first thought to be a repeat of the well-known bug that drained $2.1 million from the project toward the back end of last year. Hi @OnyxDAO, you may want to take a look pic.twitter.com/fcU6fHP4jr — PeckShield Inc. (@peckshield) September 26, 2024 Read more: Compound DAO asleep at the wheel as $25M governance ‘attack’ passes Onyx is a fork of Compound Finance, which contains an infamous vulnerability in which freshly-launched, empty lending markets are briefly left ope...

Ethervista 'unconsciously hacked' hundreds of times by bot

Image
Ethervista, an Ethereum alternative to Solana’s Pump.fun platform, has reportedly been “unconsciously hacked” hundreds of times over the past couple of days by a bot unaware of its actions.  That’s according to PhD student and blockchain security specialist Chaofan Shou, who claimed yesterday that his bot exploited Ethervista by unknowingly following the instructions of another attacker.  Shou told Protos it was a “general backrun bot” that copies other transactions and applies it in the next few blocks. He said that an initial attacker manually hacked Ethervista by exploiting an “integer overflow in the router contract to steal all the fee in it.” Because of this, Shou’s bot copied the transaction and performed the hacker’s malicious transaction over and over again . He said the bot was not designed for Ethervista and that, “both the bot and us did not know we are hacking Ethervista.” Our bot unconsciously hacked @ethervista hundreds of times over the last two d...