Nereus Finance platform lost 370 000 USDC in an exploit
The attack was carried out with flash loans and manipulating the price of AVAX tokens
08.09.2022 - 08:15
327
2 min
0
What’s new? On September 7, Nereus Finance, a decentralized platform, was hacked, causing hackers to withdraw $370 000 in USD Coin (USDC) stablecoins. According to cybersecurity firm CertiK, the attackers carried out the attack with a flash loan.
#CertiKSkynetAlert🚨CertiK Skynet has reported a #flashloan attack on #AVAX impacting contract 0xe767c... & some LPs. The attacker profited ~$370k USDC.Possible impacted protocols include:@nereusfinance @traderjoe_xyz @CurveFinance Contact us for analysis. Stay Frosty!☃️ pic.twitter.com/bZvtgVPpl4— CertiK Alert (@CertiKAlert) September 7, 2022
What else is known about the incident? Hackers managed to steal funds by manipulating the price of AVAX tokens on Nereus. The attack took place through arbitrage trades, using 51 million USDC borrowed. The attackers then transferred tokens from the Avalanche blockchain to the Ethereum blockchain.
The Nereus team confirmed the attack and is currently investigating. According to the platform’s representatives, the incident affected only one market and the protocol as a whole remained over-collateralized.
We are aware of a flash loan exploit on the AVAX/USDC Joe LP NXUSD market. This incident is isolated to a single collateral market and the NXUSD protocol as a whole remains over colateralised. We are executing a recovery process and will be publish a post-mortem shortly.— Nereus Finance🔺 (@nereusfinance) September 7, 2022
Nereus Finance is a non-custodial lending protocol running on the Avalanche blockchain. The total value locked (TVL) is $13,19 million (DefiLlama’s data as of September 8). The platform passed a security audit performed by Ambisafe.
Earlier, the FBI issued a warning to investors about vulnerabilities in DeFi platforms. Representatives of the bureau called three of the most popular types of attacks on such projects, including initiating flash loans, exploiting signature verification vulnerabilities in bridges between networks, and manipulating the price oracle.
Useful material?
Telegram 
Twitter Market
According to the founder of TRON, the leading US crypto exchange asked for several hundred million dollars for the listing of TRX
Nov 4, 2024
Incidents
The company conducted fictitious trading for six years to inflate the trading volume of tokens of several companies, receiving payment for these services
Nov 1, 2024
Market
1,5 million addresses have already left applications
Oct 31, 2024
Business
The company began investing in bitcoin in 2020, and since then, the value of its securities has risen by 1700%
Oct 30, 2024
Mining
The Deputy Energy Minister explained that in deficit regions, it is impossible to allocate large capacities for industry enterprises until 2030
Oct 30, 2024
Market
Customers will also be able to withdraw funds to bank accounts using cards
Oct 30, 2024
Cryptocurrency rates
-
Bitcoin
$67 687
BTC
-0.83%
-
Ethereum
$2 421.82
ETH
-0.81%
-
BNB Smart Chain
$570.25
BSC
-0.32%
-
Ripple
$0.508368
XRP
+1.87%
-
Dogecoin
$0.156602
DOGE
+6.84%
-
Cardano
$0.325476
ADA
-1.65%
-
Bitcoin Cash
$333.72
BCH
-1.43%
-
Polkadot
$3.77
DOT
+0.22%
-
Litecoin
$66.19
LTC
+0.1%
-
Stellar XLM
$0.091165
XLM
+1.16%