Fun

‘Sophisticated’ Hacker Plunders $450,000 From Defi Protocol Balancer

News Feed - 2020-06-30 02:06:54

"Sophisticated" Hacker Plunders $450,000 From Defi Protocol Balancer


Decentralized finance (Defi) protocol ​Balancer was on Sunday hacked for more than $450,000 worth of cryptocurrency.


In two separate transactions, an attacker targeted two pools containing Ethereum-based tokens with transfer fees – or so-called deflationary tokens.


Pools with Sta and Stonk tokens were affected by this exploit, Balancer, an automated market marker protocol, said on June 29.


The hacker made off with around 601 ether, 11 wrapped bitcoin (WBTC), 22,600 chainlink (LINK), and 61,000 synthetix (SNX) – altogether totaling more than $451,000.


According to an analysis by Dex aggregator 1inch.exchange, the attacker used a smart contract to automate multiple actions in a single transaction. First, the hacker obtained a flash loan of $23 million worth of ethereum from the crypto-lending platform Dydx.


The money was used to swap Weth to Statera (Sta), a so-called deflationary token, back and forth 24 times until the Sta balance was totally drained. With Sta, at least one percent of the token is programmed to burn with every transaction.


However, the Balancer pool apparently failed to account for this mechanism. So, the Sta balance declined by one percent every time the attacker made their 24 swaps. After this, the hacker exchanged 1 weiSta, or the equivalent of a billionth of a token, to Weth several times.


Due to Sta token transfer fee implementation, the pool never received statera, but still proceeded to release the wrapped ether regardless, said 1inch. The same step was repeated to drain WBTC, SNX, and link token balances from the pool, it added.


Finally, the attacker repaid the $23 million Dydx loan. Later, they converted the Sta tokens to Balancer pool tokens and eventually into ethereum via Uniswap, which was then cashed out.


1inch noted that the attack was carried out by a “sophisticated smart contract engineer” who is deeply knowledgeable about decentralized finance and its protocols.


Balancer claimed that “we were not aware this specific type of attack was possible, [but] we have consistently…warned about the unintended effects ERC20s with transfer fees could have in the protocol.”


To prevent future attacks, the platform said that it will start to add ‘transfer fee tokens to the UI blacklist similarly to what we have done for no bool transfer tokens.”


“We will be adding more documentation around the risks of how these pools work and how broken or maliciously designed tokens can potentially drain assets from a pool,” it added.


A number of Defi platforms have been hacked this year.​ In February, Bzx protocol was attacked twice while Maker lost around $8.3 million in March. Uniswap and Dforce were drained of $300,000 and $25 million, respectively, although this later amount was returned by the hacker in April.


What do you think about the Balancer pool hack? Let us know in the comments section below.Skeptics Concerned Plustoken Scammers Plan to Dump $187M Worth of EthereumALTCOINS | 1 day agoYield Farming Pool Concept May Solidify Ethereum"s Role as BTC"s Main SidechainALTCOINS | 3 days agoTags in this story1inch, Balancer pool hack, decentralized finance, Dforce, ERC20 Tokens, hacked, Maker, uniswap


Image Credits: Shutterstock, Pixabay, Wiki CommonsSpot-markets for Bitcoin, Bitcoin Cash, Ripple, Litecoin and more. Start your trading here.Disclaimer: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. Bitcoin.com does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article.Read disclaimer Show comments

News Feed

Biggest Movers: LUNA Climbs 1,500% Following Do Kwon Tweets, While AVAX and NEAR Fall on Saturday
Biggest Movers: LUNA Climbs 1,500% Following Do Kwon Tweets, While AVAX and NEAR Fall on Saturday Following tweets from Terra founder Do Kwon, LUNA surged by over 1,500% on Saturda
Crypto Exchange Giant Coinbase to Sell Shares Privately Ahead of Public Offering
Crypto Exchange Giant Coinbase to Sell Shares Privately Ahead of Public Offering According to a recent report, the San Francisco-based cryptocurrency exchange Co
New York Giants’ Saquon Barkley Plans to Convert Endorsement Revenue to Bitcoin
New York Giants" Saquon Barkley Plans to Convert Endorsement Revenue to Bitcoin Another pro athlete in the National Football League (NFL) is planning to convert
Polkadot Top 10 Redenomination Shot: Is the Token Now Bigger Than Chainlink?
Polkadot Top 10 Redenomination Shot: Is the Token Now Bigger Than Chainlink?The Polkadot token, which recently underwent a redenomination, has seen its value more than double in les
FTX CEO Updates Crypto Community, Sunsets Alameda Trading, Addresses a Specific ‘Sparring Partner’
FTX CEO Updates Crypto Community, Sunsets Alameda Trading, Addresses a Specific "Sparring Partner" On Nov. 10, 2022, FTX CEO Sam Bankman-Fried (SBF) addressed the crypto community
Bitcoin Leads Momentum as Top Cryptos Trade Below Key Price Average
Bitcoin (BTC) and Bitcoin SV (BSV) are the only cryptocurrencies within the top 10 by market capitalization to have jumped back above their long-term moving averages. The 200-day mo
Tom Mitchelhill3 hours agoDoorDash launches AI bot to take customer takeout ordersDuring peak times, DoorDash’s AI system will take the load off restaurants by automatically answering incoming phone calls.685 Total vie
Terra Fiasco Stirs Value Locked in Defi — Lido, Anchor Plummet to Lower Positions
Terra Fiasco Stirs Value Locked in Defi — Lido, Anchor Plummet to Lower Positions Decentralized finance (defi) protocols are having a hard time weathering the storm, as the total
Dow Runs Out of Gas on Tired Trade War Deja Vu
The Dow Jones was up a measly 50 points on Friday as positive data and trade war developments failed to meaningfully lift the stock market. | Source: Brendan Smialowski / AFPThe Dow
AMC Theatres Explores Accepting Dogecoin: CEO Fascinated by DOGE Poll Results
AMC Theatres Explores Accepting Dogecoin: CEO Fascinated by DOGE Poll Results AMC Theatres chain is exploring how to accept dogecoin alongside four other cryptocurrencies. AMC
Telegram Refutes All SEC Allegations, Asks Court to Dismiss in New Filing
Messaging app firm Telegram has made a new plea to a U.S. court to drop an action brought by the Securities and Exchange Commission (SEC) alleging its yet-to-be launched token is a security.
Veteran Trader Peter Brandt Warns Bitcoin’s Price Corrections Can Be Lengthy
Veteran Trader Peter Brandt Warns Bitcoin"s Price Corrections Can Be Lengthy Veteran trader Peter Brandt has warned that bitcoin’s price corrections have taken many months i