Hot News

Hot News

副标题

The Malaysian mobile brand meen has formally disclosed that its latest product will be unveiled at 2:00 PM on August 15th at W Hotels in Kuala Lumpur (The Great Room, Level 9). During this highly a...
2023-08-10
Founded in 2020, FameEX is a secure and globally recognized cryptocurrency exchange that has achieved significant milestones over the past few years. As they gear up for their third-year anniversar...
2023-03-08
Bored Apes Yacht Club has risen from virtual avatars to a super IP in the NFT industry with implemented commercial applications, making it a role model for many other PFP successors. Affected by su...
2023-03-08
The Ready Player One, jointly created by several internationally renowned institutions such as Golden Collar U.S.Venture Capital Inc, is a digital ecological platform for games based on blockchain ...
2023-02-01
7*24

7*24

副标题

In the wake of the global digitalization wave, digital finance is increasingly becoming a vane of the financial industry. Digital Finance Fusion Bank (DFF), as a leader in this revolution, has beco...
2023-11-21
In a vibrant and increasingly complex cryptocurrency market, choosing a trading platform that prioritizes security is crucial. HOUNAX, a globally leading cryptocurrency trading platform, is becomin...
2023-07-28
REVOLUTIONZING CRYPTO BINARY TRADINGBinary Guardian, a leading platform in the world of cryptocurrency trading, is proud to announce the launch of its revolutionary Guardian Automation BOT trade sy...
2023-07-11
In the global cryptocurrency market, YOMAEX is demonstrating its strong capabilities as a digital currency platform, with its exceptional global influence and unique advantages in global developmen...
2023-07-07
YOMAEX Exchange, hailed as a global leader in digital asset trading, has recently attracted significant capital attention, once again affirming its leading position in the global digital asset trad...
2023-07-01
NaaS (NASDAQ:NAAS) announced its unaudited financial results for the first quarter of 2023 on June 16 (UTC+8). The company achieved a remarkable milestone with revenue reaching RMB 36.2 million (or...
2023-06-16
In June 2023, the globally acclaimed NFT financial service platform, NFTfi, introduces its new digital asset investment venture, NFTfi-Asia, in the Asia-Pacific region, opening up a plethora of luc...
2023-06-15
Since time immemorial, games have been an integral part of everyday life. With the evolution of computer technology, games have transitioned from offline to online platforms. In recent years, the g...
2023-05-24
According to the Vorsi team, Vorsi Web3.0 Academy was initiated and established in Q1 of 2023, with Dr. Russell as a core member of the team. Russell is a computer science Ph.D. from the University...
2023-05-24
Amidst the continuous advancement of blockchain technology and artificial intelligence, the digital economy has emerged as the prevailing global trend. Against this backdrop, the Kredivo Project ha...
2023-05-18
On 13 March 2023, CyberConnect, the decentralized social graph protocol is culminating in the wrap of Connected 2023, a Web3 social hackathon organized in partnership with BNBChain, the world’s lar...
2023-03-15
Decentralized social collaboration network DreamLand will be officially launched in mid-March, and its first NFT, Chill Parrot, will be released in April. DreamLand will open Founding Member partne...
2023-03-10
BitValue announced the Investment in Spield Algorithm, which is Shaping the Future of AI Quantitative Analysis.Web3 is rapidly changing the world, and an increasing number of people are recognizing...
2023-03-08
PLXYER, pronounced "player", has announced the launch of their all-in-one Web3.0 game portal platform. This Gaming platform is designed to provide players with a thrilling gaming experience while o...
2023-03-02
iPeakoin, a fintech institution that facilitates a seamless integration between financial and crypto infrastructure, recently announced the launch of its CaaS (Card as a Service), aiming to bring c...
2023-02-27
Funversy, the first NFT ecosystem built on the BNB network, recently launches its Beta Version and updates the functions of Launchpad, Farm and Trade, is committed to creating a new NFT platform wi...
2022-10-28
dYdX said on its social platform that due to excessive user participation, the activity of depositing more than $500 to get a $25 bonus has been stopped. Yesterday's news, dYdX announced that it wi...
2022-09-02
The data on the Tokenview chain shows that the current total holdings of Grayscale is 18.276 billion US dollars, and the trust premium rates of mainstream currencies are as follows: BTC, -32.69% ET...
2022-09-02
Yuga Labs metaverse project Otherside released a new promotional video on its social platform, and hinted that the project may announce new plans in Q4.
2022-09-02
The market shows that Ethereum hit $1,600 per piece, up 1.27% on the day.
2022-09-02

Inverse Finance exploited again for $1.2M in flash loan oracle attack

Issuing time:2022-07-16 11:50

No user funds have been affected by the exploit, but Inverse Finance has incurred debt and offered the attacker a bounty to return the stolen funds.


Just two months after losing $15.6 million in a price oracle manipulation exploit, Inverse Finance has again been hit with a flash loan exploit that saw the attackers make off with $1.26 million in Tether (USDT) and Wrapped Bitcoin (wBTC).


Inverse Finance is an Ethereum-based decentralized finance (DeFi) protocol and a flash loan is a type of crypto loan that is usually borrowed and returned within a single transaction. Oracles report outside pricing information.


The latest exploit worked by using a flash loan to manipulate the price oracle for a liquidity provider (LP) token used by the protocol’s money market application. This allowed the attacker to borrow a larger amount of the protocol’s stablecoin, Dola (DOLA), than the amount of collateral they posted, letting them pocket the difference.


The attack comes just over two months after a similar April 2 exploit, which saw attackers artificially manipulate collateralized token prices through a price oracle to drain funds using the inflated prices.


In response to the attack, Inverse Finance temporarily paused borrowing and removed DOLA from the money market while it investigated the incident, saying no user funds were at risk.


It later confirmed that only the attacker’s deposited collateral was affected in the incident and only incurred a debt to itself due to the stolen DOLA. It encouraged the attacker to return the funds in return for a “generous bounty.”



In total, the attackers gained 99,976 USDT and 53.2 wBTC from the attack, swapping them to ETH before sending it all through the cryptocurrency mixer Tornado Cash, attempting to obfuscate the ill-gotten gains.


The previous attack in April saw attackers make off with $15.6 million in Ether (ETH), wBTC, Yearn.Finance (YFI) and DOLA.


DeFi marketplace Deus Finance suffered from a similar exploit in March, with attackers manipulating a price pairing within an oracle leading to a gain of 200,000 Dai (DAI) and 1101.8 ETH, worth over $3 million at the time.


Beanstalk Farms, a credit-based stablecoin protocol, lost all $182 million worth of collateral in a flash loan attack caused by two malicious governance proposals, which in the end, drained all funds from the protocol.


How the latest attack went down

Blockchain security firm BlockSec analyzed that the attacker borrowed 27,000 wBTC in a flash loan, swapping a small amount to the LP token used to post collateral in Inverse Finance so users can borrow crypto assets.


The remaining wBTC was swapped to USDT, causing the price of the attacker’s collateralized LP token to rise significantly in the eyes of the price oracle. With the value of these LP tokens now worth far more due to the price rise, the attacker borrowed a larger amount than usual of the DOLA stablecoin.


The value of the DOLA was worth much more than the deposited collateral, so the attacker swapped the DOLA to USDT, and the earlier wBTC to USDT swap was reversed to repay the original flash loan.