dForce Loses $3.65M to an Exploiter on Arbitrum and Optimism

1. dForce lost $3.65 Million to an exploiter on Arbitrum and Optimism.
2. The total amount of Ethereum tokens stolen in these assaults was $3.65 million.
3. dForce Network immediately disabled access to the dForce Vaults.

An investigation by Cryptonewsland found that a large number of suspicious Arbitrum and Optimism transactions took place via dForce Network, the unified platform for the DeFi protocols.

Read CRYPTONEWSLAND on google news

Security and analytics firm PeckShield Inc. estimates that the total amount of Ethereum tokens stolen in these assaults was $3.65 million.

According to the findings from PeckShield, the exploit was only made feasible because the price of the wstETHCRV-gauge asset on the dForce network was changed via reentrancy (through wstETHCRV.remove liquidity). 

Because of this, the exploiter was successful in closing off multiple positions by using the wstETHCRV-gauge as collateral.

Additionally, 0.99 ETH of the initial capital is withdrawn from the RAILGUN project. This project is a decentralized application (dApp) system that any wallet may integrate and then send to Optimism and Arbitrum via SynapseNetwork.

Moreover, the 2.3 thousand ETH, which is equivalent to around $3.65 million, is still sitting in the hacker’s account. On the other hand, reports indicate that the dForce Network immediately disabled access to the dForce Vaults. However, all of the protocol’s subsystems continue to function normally, and dForce Lending maintains a safe environment for its users’ funds.

Peckshield also said that one of its contributors to the community, @ZoomerAnon, was aware of the issue with the dForce flash loan exploit.

Another blockchain security network called BlockSec believes that a read-only reentrancy attack around the curve pool is the primary driver of this latest issue. BlockSec made the observation that the pricing oracle that dForce’s lending protocol relies on may be readily manipulated by malicious actors.

Read Also

• Ankr Becomes an RPC Provider to Ethereum L2 Scaling Solution Optimism
• Bitcoin Price Surges Over $21,000 on Inflation Optimism
• Crypto Heists Explained: How to Avoid Crypto Hacks
• Ankr Was Hit by a Multi-Million Dollar Exploit on Dec. 1
• Over $180,000 Stolen by DeFi Exploiter from CoW Swap DEX