Deus Finance protocol lost $13,4 million in re-hacking
An attacker used the same method of attacking the project as during the first hack in March, according to PeckShield
28.04.2022 - 14:00
263
2 min
0
What’s new? On April 28, Deus Finance, a DeFi protocol, was hacked again. The hacker managed to withdraw $13,4 million, but the project “loss may be larger,” the analysts at PeckShield reported on Twitter. The exploit occurred on the Fantom network. According to the experts, this was made possible by manipulating the price oracle, which reads data from the USDC/DEI pair, with an instant loan. The manipulated price of the DEI collateral was used to borrow and deplete the pool. PeckShield analysts compared the April 28 hacking scheme to the attack the protocol suffered in March.
Details of the hack. The attacker needed 800 ETH ($2,34 million) to initiate the attack. He deposited the assets through the Tornado Cash transaction mixer and sent them to the Fantom network using the Multichain cross-chain protocol. The hacker converted the stolen funds back into Ethereum. As a result of the hack, the price of algorithmic stablecoin DEI fell to $0,95 (according to Binance) and lost its peg to the US dollar.
Statement of the project’s representatives. The Deus Finance team has confirmed the information about the hack on Twitter. Representatives reported that users’ funds are safe and their positions have not been liquidated. The developers have notified that DEI lending has been temporarily suspended and that the peg of stablecoin to the dollar has been restored.
What preceded it? On March 15, Deus Finance was attacked by an unknown hacker. Using the vulnerability discovered, the attacker withdrew about $3 million from the protocol. The platform’s instant loan service was used during the attack. The hacker managed to manipulate an oracle that determines the price in the USDC/DEI stablecoin pair.
Useful material?
Market
According to the founder of TRON, the leading US crypto exchange asked for several hundred million dollars for the listing of TRX
Nov 4, 2024
Incidents
The company conducted fictitious trading for six years to inflate the trading volume of tokens of several companies, receiving payment for these services
Nov 1, 2024
Market
1,5 million addresses have already left applications
Oct 31, 2024
Business
The company began investing in bitcoin in 2020, and since then, the value of its securities has risen by 1700%
Oct 30, 2024
Mining
The Deputy Energy Minister explained that in deficit regions, it is impossible to allocate large capacities for industry enterprises until 2030
Oct 30, 2024
Market
Customers will also be able to withdraw funds to bank accounts using cards
Oct 30, 2024