Tuesday, January 31, 2023
No Result
View All Result
  • Home
  • Recent
  • Business
  • Economy
  • Investing
  • Markets
  • Personal Finance
  • Retirement
  • Tech
  • Startups
  • Insurance
  • Market Research
  • Crypto
  • Home
  • Recent
  • Business
  • Economy
  • Investing
  • Markets
  • Personal Finance
  • Retirement
  • Tech
  • Startups
  • Insurance
  • Market Research
  • Crypto
No Result
View All Result
Home Cryptocurrency

Inverse Finance exploited again for $1.2M in flash loan oracle attack

Updates Finance by Updates Finance
June 17, 2022
in Cryptocurrency
0
74
SHARES
1.2k
VIEWS
Share on FacebookShare on Twitter



You might also like

Examiner finds customer deception, ‘very Ponzi-like’ use of funds at Celsius

Bitcoin futures open interest grows ahead of FOMC meeting

6 Consensus Mechanisms You Need to Know

Just two months after losing $15.6 million in a price oracle manipulation exploit, Inverse Finance has again been hit with a flash loan exploit that saw the attackers make off with $1.26 million in Tether (USDT) and Wrapped Bitcoin (wBTC).

Inverse Finance is an Ethereum-based decentralized finance (DeFi) protocol and a flash loan is a type of crypto loan that is usually borrowed and returned within a single transaction. Oracles report outside pricing information.

The latest exploit worked by using a flash loan to manipulate the price oracle for a liquidity provider (LP) token used by the protocol’s money market application. This allowed the attacker to borrow a larger amount of the protocol’s stablecoin, Dola (DOLA), than the amount of collateral they posted, letting them pocket the difference.

The attack comes just over two months after a similar April 2 exploit, which saw attackers artificially manipulate collateralized token prices through a price oracle to drain funds using the inflated prices.

In response to the attack, Inverse Finance temporarily paused borrowing and removed DOLA from the money market while it investigated the incident, saying no user funds were at risk.

Inverse has temporarily paused borrows following an incident this morning where DOLA was removed from our money market, Frontier. We are investigating the incident however no user funds were taken or were at risk. We are investigating and will provide more details soon.

— Inverse+ (@InverseFinance) June 16, 2022

It later confirmed that only the attacker’s deposited collateral was affected in the incident and only incurred a debt to itself due to the stolen DOLA. It encouraged the attacker to return the funds in return for a “generous bounty.”

Related: Attackers loot $5M from Osmosis in LP exploit, $2M returned soon after

In total, the attackers gained 99,976 USDT and 53.2 wBTC from the attack, swapping them to ETH before sending it all through the cryptocurrency mixer Tornado Cash, attempting to obfuscate the ill-gotten gains.

The previous attack in April saw attackers make off with $15.6 million in Ether (ETH), wBTC, Yearn.Finance (YFI) and DOLA.

DeFi marketplace Deus Finance suffered from a similar exploit in March, with attackers manipulating a price pairing within an oracle leading to a gain of 200,000 Dai (DAI) and 1101.8 ETH, worth over $3 million at the time.

Beanstalk Farms, a credit-based stablecoin protocol, lost all $182 million worth of collateral in a flash loan attack caused by two malicious governance proposals, which in the end, drained all funds from the protocol.

How the latest attack went down

Blockchain security firm BlockSec analyzed that the attacker borrowed 27,000 wBTC in a flash loan, swapping a small amount to the LP token used to post collateral in Inverse Finance so users can borrow crypto assets.

The remaining wBTC was swapped to USDT, causing the price of the attacker’s collateralized LP token to rise significantly in the eyes of the price oracle. With the value of these LP tokens now worth far more due to the price rise, the attacker borrowed a larger amount than usual of the DOLA stablecoin.

The value of the DOLA was worth much more than the deposited collateral, so the attacker swapped the DOLA to USDT, and the earlier wBTC to USDT swap was reversed to repay the original flash loan.





Source link

Tags: 1.2MattackexploitedFinanceflashInverseloanoracle
Share30Tweet19
Updates Finance

Updates Finance

Recommended For You

Examiner finds customer deception, ‘very Ponzi-like’ use of funds at Celsius

by Updates Finance
January 31, 2023
0

Court-appointed examiner Shoba Pillay submitted her final report on select aspects of operations at bankrupt cryptocurrency Celsius on Jan. 31. The document was commissioned on Sept. 29 and...

Read more

Bitcoin futures open interest grows ahead of FOMC meeting

by Updates Finance
January 31, 2023
0

Futures open interest (OI) is the total number of open futures contracts for an asset held by market participants. Open interest on futures contracts for any given asset...

Read more

6 Consensus Mechanisms You Need to Know

by Updates Finance
January 31, 2023
0

Understanding what consensus mechanism are and what they do can be a difficult task for those not in touch with blockchain technology. However, as you get involved with...

Read more

Russians Offered Ready-made Crypto Exchange Accounts Amid Restrictions – Exchanges Bitcoin News

by Updates Finance
January 31, 2023
0

Russian crypto traders have been looking to obtain unrestricted accounts for global exchanges as their access to such platforms is limited. Over the past year, the offering of...

Read more

FTX sister company Alameda Research sues Voyager Digital for $446M

by Updates Finance
January 31, 2023
0

Embattled crypto investment firm Alameda Research is suing bankrupt crypto lender Voyager Digital in an effort to claw back loan repayments FTX made before it collapsed in November.Lawyers...

Read more
Next Post

Bifrost releases upgraded SALP 2.0 after protocol helped secure $450M via parachain auctions

Related News

Paytm Monthly Transacting Users Grew 49 Percent YoY, Q1 Net Loss Widens to Rs 644.4 Crore

August 5, 2022

Can We Have Scarcity but Reject the “Scarcity Mindset?” in a Word, No

October 22, 2022

What Apple’s Freeform collaboration app offers remote teams

August 12, 2022

Browse by Category

  • Business
  • Cryptocurrency
  • Economy
  • Insurance
  • Investing
  • Latest updates
  • Market Research
  • Markets
  • Personal Finance
  • Retirement
  • Startups
  • Technology

Get the latest Financial news on updatesfinance.com. Business news, Economy news, Investing news, Personal Finance and more.

CATEGORIES

  • Business
  • Cryptocurrency
  • Economy
  • Insurance
  • Investing
  • Latest updates
  • Market Research
  • Markets
  • Personal Finance
  • Retirement
  • Startups
  • Technology

Recent News

  • OpenAI releases tool to detect AI-generated text, including from ChatGPT • TechCrunch
  • Fortunately, this isn’t the Volcker disinflation

Copyright © 2022 - Updates Finance..

No Result
View All Result
  • Home
  • DMCA
  • Disclaimer
  • Cookie Privacy Policy
  • Privacy Policy
  • Terms and Conditions
  • Contact us

Copyright © 2022 - Updates Finance..

Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?