PeckShield: Deus Finance lost 13 million in cryptocurrency as a result of a cyber attack


Cybersecurity specialists reported that Deus Finance was hacked by a hacker who used a script already used to illegally withdraw assets from this site.

Blockchain Security Company PeckShield reported on Twitter that on April 28 Deus Finance, which provides customers with services to create synthetic tokens, trading platforms and other financial instruments, was re-hacked. As a result of a cyber attack, the decentralized protocol lost $13.4 million in assets.

This is the second time in two months that the site has been cyberattacked. In the first such incident, an unknown person withdrew $3 million in cryptocurrency.

PeckShield specialists clarified that the hack occurred exactly according to the previous scenario. The attacker, using an instant loan, manipulated the price oracle “which indexes data from the StableV1 AMM – USDC / DEI pair” – as a result of which platform users became insolvent.

The criminal used the DEI collateral to hack into the pool without authorization. PeckShield officials warn that the loss to the protocol could be much higher than $13.4 million.

The hacker took about 800 Ether to launch the cyberattack, all of which was taken from Tornado Cash and tunneled to Fantom via Multichain. The hacker’s address currently shows that he exchanged the stolen funds for Ethereum and sent it back to Tornado Cash.

It is not yet known whether the same hacker is behind the double hack of the crypto site. Deus Finance has yet to comment on PeckShield’s announcement of the site hack.

However, hackers are not always able to withdraw cryptocurrencies from the site. BlockSec experts are at a loss as to why the attacker, who successfully hacked the smart contract of the Zeed protocol, did not steal the cryptocurrency available to him. It is possible that it was a white hat hacker who thus pointed out the vulnerability of the protocol.


Source: Bits

You may also like