• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Changelly
  • Price table

Crypto News PRO

From the world all news

  • Home
  • News

1Inch Exchange Co-Founder Disputes Claims bZx Attackers Stole $8m in DeFi Exploit

Written by:
Aeon Flux
Published on:
14 September 2020
Thoughts:
No comments yet

DeFi lending protocol bZx suffered another attack last night, the second in seven months.

This time, faulty code was blamed for an exploit that allowed hackers to duplicate assets, or increase their iTokens balance without the appropriate collateral.

Reports are circulating that hackers stole cryptocurrencies worth $8 million. But Anton Burkov, Co-founder of 1inch Exchange, analyzed the relevant DeFi explorer, removing duplicate items, as well as bZx “admin drainages”, to conclude those reports are greatly exaggerated.

According to Burkov, the amount lost to the duplication exploit is closer to $1.7 million. Further analysis carried out by Burkov pinpointed the exploit to nine transactions on the iETH lending token, worth approximately 4.7k Ethereum in total.

“We found 9 exploiting transactions on $iETH lending token with 101778 $iETH tokens duplicated (worth ~4.7K $ETH) // @DuneAnalytics”

DeFi protocol bZx lost $1.7 million in latest exploit

DeFi protocol bZx lost $1.7 million in latest exploitSource: twitter.com

In response to the exploit, bZx issued a statement saying investors are covered by an insurance fund paid for through treasury funds and protocol cashflow.

What’s more, in the statement, bZx spun the incident to demonstrate the soundness of the protocol.

“As we have demonstrated before, the system is capable of absorbing black swan events that would otherwise negatively impact lender assets. Thanks to a protocol design that anticipates and accounts for tail events, this incident is surmountable. The debt will be wiped clean and the protocol will move forward unimpeded.”

However, considering the number of high profile exploits and exits happening in DeFi of late, this latest exploit has done little to legitimize DeFi.

DeFi Hackers Exploit Duplication Bug

A postmortem of what happened shows several failings. Initially, Lead Developer at bitcoin.com, Marc Thalen, raised the alarm by tweeting his discovery of the DeFi duplication exploit.

However, due to time differences, no-one at bZx was able to respond straight away.

In the meantime, Thalen then went on to test the exploit himself. He said that he created a 100 USDC loan from which he was able to claim 200 iUSDC.

“2/4 I tried the exploit out. I created a loan using USDC (100 USD). From this I retrieved iUSDC. I then sent this to myself practically duplicating the funds. I then created a claim for 200 USD.“

By the time the bZx team was aware of the problem, the attacker had already drained a substantial amount of DeFi assets.

In response, bZx paused the minting and burning of iTokens as they investigated the claims. The team then applied a patch to the iTokens contracts, correcting duplicate balances at the same time.

Following that, normal activity resumed.

What Next For bZx?

The bZx protocol was attacked in February in a flash lending exploit. Attackers were able to steal $350k by manipulating the Uniswap price feed for wrapped Bitcoin.

However, bZx denies the incident came about as a result of using Uniswap price feeds.

At the time, bZx was ranked as the 7th largest protocol by total value locked (TVL). But following the flash lending exploit, it began slipping down in the DeFi rankings.

Today, defipulse.com ranks bZx as the 37th biggest by TVL, a substantial fall in standing.

Source: defipulse.com

In a bid to reassure DeFi investors, bZx Co-founders Tom Bean and Kyle Joseph Kistner will field questions about the incident later tonight.

But the real concern is whether today’s exploit will lead to a further drop in standing.

In terms of token price, BZX is down 30% on the day. However, will the duplication exploit lead to further price declines?

Daily price chart of DeFi protocol bZx

Daily price chart of DeFi protocol bZxBZX daily chart with volume. (Source: tradingview.com)

Tags: bZxBZXUSDTDeFiethereumhack

Categories: Bitcoin, Ethereum, News

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Search in the news

Translate:

Earn up to 5% every 10 days with Aeon Flux Coins

Categories

  • Bitcoin (1,421)
  • Ethereum (889)
  • News (2,532)

Recent Posts

  • 3 of the Best Crypto Swapping Services You Need for 2021 20 February 2021
  • 500 percent growth: Binance Coin overtakes Cardano, Polkadot and Tether 20 February 2021
  • Michael Saylor: “Bitcoin is Digital Gold” 20 February 2021
  • Why this $250 Credit Card was No-Brainer 20 February 2021
  • Apple Starts 6G Development: 100 Times Faster Than 5G 20 February 2021

Archives

  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020

© 2015-2020 Crypto News PRO
All Rights Reserved. Powered by IWG Agenzia Web