On March 15, three DeFi attacks with the flash loan process occurred, focusing on 3 tasks, Deus Finance, Agave and Hundred Finance.
In the early afternoon of March 15, the Deus Finance (DEUS / DEI) protocol was hit by a flash loan assault on the Fantom network, resulting in losses of about $ three million.
According to safety company PeckShield, the attacker applied a flash loan mechanism to withdraw money from the project’s stablecoin loan agreement. After borrowing substantial sums of funds with flash loans, the attacker applied it to manipulate the worth of the USDC / DEI trading pair on Deus and revenue from the price tag distinction.
As a consequence, the attacker efficiently withdrew one,one hundred ETH and 200,000 DAI from Deus, really worth about $ three million, and laundered this sum by way of the Tornado Cash trading mixer.
DEUS submit mortem official from @lafachief has been published.
Special thanks to our local community for their continued assistance 👏https://t.co/wxH3mjOLfR
– DEUS Finance DAO (@DeusDao) March 15, 2022
The Deus Finance crew then confirmed that the venture had been breached, pledging to totally compensate the end users harmed due to the aforementioned price tag manipulation.
By the evening of March 15, the DeFi local community continued to acquire terrible information when two loan tasks on Gnosis Chain, Agave (AGVE) and Hundred Finance (HND), had been also attacked with a equivalent flash loan process.
First, the attacker exploited the re-entry vulnerability on each Agave and Hundred to “trick” the intelligent contract of the two tasks into interacting with the contract containing the assault command. He then continued to use flash loans to borrow substantial quantities of coins from two tasks, in advance of repaying the flash loans and holding the stability.
Contracts had been suspended right up until we figured out how to resolve the predicament.
– Agave (@Agave_lending) March 15, 2022
Unfortunately Cento and Agave have each been exploited right now in the chain of Gnosis. The Gnosis crew is mindful, the investigation is ongoing.
All 1 hundred markets of all chains have been suspended for now.
These are the two transactions:
Hundred https://t.co/mdtViohijn
Agave https://t.co/RKB5MVx0O4– Hundred Finances (@HundredFinance) March 15, 2022
According to statistics, the complete injury to Agave and Hundred following the aforementioned incident is about $ eleven million. Both tasks have now stopped all pursuits to investigate and repair the vulnerability, but have not announced whether or not or not to compensate end users.
Flash lending has lengthy been a “double-edged sword” that haunted the DeFi business. On the 1 hand, it provides end users quick entry to ample liquidity to adhere to protocols, as lengthy as the loan is repaid inside of the similar block of transactions. On the other hand, it provides the terrible guys options to get benefit of to extract funds from tasks with intelligent contract vulnerabilities like the past circumstances.
In the previous, flash loans have been applied to severely injury Cream Finance, which drained up to $ 130 million in October 2021.
Synthetic currency 68
Maybe you are interested: