- Hundred Finance falls victim to $7.4 million flash loan attack on Optimism.
- Attacker manipulated ERC-20 and hTOKEN exchange rates for illicit gains.
- Security firm CertiK identifies the donation of WBTC as attack method.
Hundred Finance, a prominent multichain lending protocol, recently reported a major security breach on the Ethereum layer-2 blockchain, Optimism. The attack, resulting in a staggering $7.4 million loss, highlights emerging vulnerabilities in the decentralized finance (DeFi) sector.
Read CRYPTONEWSLAND on
google news
The protocol first revealed the exploit on April 15, acknowledging that it had reached out to the attacker and engaged several security teams to investigate the incident. While the exact details of the attack remain undisclosed, blockchain security firm CertiK believes it was a flash loan attack.
Flash loan attacks are a growing concern in the DeFi space. In these attacks, hackers borrow substantial sums of money in the form of uncollateralized loans from lending protocols. They then exploit these funds to manipulate asset prices on DeFi platforms.
CertiK’s analysis of the Hundred Finance attack suggests that the perpetrator distorted the exchange rate between ERC-20 tokens and hTOKENS. This allowed the attacker to withdraw more tokens than they initially deposited. The manipulation centered on the cash value, which refers to the amount of Wrapped Bitcoin (WBTC) held by the hBTC contract.
The attacker reportedly donated massive quantities of WBTC to the hToken contract, causing the exchange rate to skyrocket. Under this manipulated exchange rate, the hacker proceeded to take out large loans. Hundred Finance is currently compiling a report to shed more light on this security breach.
In other news, in a court lawsuit involving the Algorand Foundation and Three Arrows Capital, the Singapore High Court ruled against recognizing cryptocurrency as money. The issue revolved around the Algorand Foundation’s application to dissolve Three Arrows Capital, which was challenged by the latter because the claim of $53.5 million USDC, was not receivable in Singapore dollars.
Read also:
disclaimer read moreCrypto News Land (cryptonewsland.com) , also abbreviated as “CNL”, is an independent media entity — we are not affiliated with any company in the blockchain and cryptocurrency industry. We aim to provide fresh and relevant content that will help build up the crypto space since we believe in its potential to impact the world for the better. All of our news sources are credible and accurate as we know it, although we do not make any warranty as to the validity of their statements as well as their motive behind it. While we make sure to double-check the veracity of information from our sources, we do not make any assurances as to the timeliness and completeness of any information in our website as provided by our sources. Moreover, we disclaim any information on our website as investment or financial advice. We encourage all visitors to do your own research and consult with an expert in the relevant subject before making any investment or trading decision.
