Exploits
Upstart AMM Uranium Finance Suffers $50M Hack, Second Attack in a Month
Uranium Finance, an automated market maker on Binance Smart Chain, suffered its second hack this month, this time to the tune of $50M. The hack is due to a misstep in code modification which allowed the hacker to exchange one unit of an input token for 98% of the value as output according to Kyle…
Compound Finance Fork EasyFi Loses Over $60M in Admin Key Hack
EasyFi, a Compound Finance fork launched directly on the Polygon Layer 2 Network, suffered a major hack on Monday, losing over $60M of the project’s EASY tokens and also $6M of users’ provided liquidity. The hacker gained access to the project’s admin key, which allows developers to make changes to their protocol. The attack is…
Pancakeswap, Cream Finance, Suffer DNS Attacks
Hackers compromised PancakeSwap’s and Cream Finance’s websites yesterday. The Domain Name Service (DNS) attack modified the affected protocols’ website to display a request for the user’s seed phrase, which, if submitted, would compromise their entire account. PancakeSwap and Cream urged their users to stay away from their URLs as they scrambled to regain control of…
Social Tokens Get Rolled On
Social money issuer Roll was hacked for nearly $5.7M of creator tokens held in hot wallets on the platform over the weekend. Using Roll’s private keys, the hacker made off with tokens from 400+ creators on the platform. They immediately sold into Uniswap pools created around the vulnerable social tokens and transferred the ETH via…
DODO DEX Suffers $2.1M Hack
DODO, a crypto exchange with contracts on both Binance’s Smart Chain and Ethereum, has suffered a $2.1M hack. The hacker attacked DODO’s Crowdpools, which the project launched in February as part of their version 2 (V2). “On March 8, Several DODO V2 Crowdpools were attacked. WSZO, WCRES, ETHA, and FUSI pools were impacted, while AC…
CREAM and Alpha Finance Get Hacked for $37.5M
DeFi experienced one of its more complex exploits over the weekend. An attack which resulted in ~$37.5M drained from CREAM Finance’s Iron Bank using Alpha Homora’s leveraged debt. An attacker was able to use Alpha’s sUSD contracts which had not yet been released to the public or made available in the UI to act as…
Yearn Restores yDAI Vault and Compensates Hack Victims
Yearn Finance, the yield aggregator protocol which suffered the first major hack of 2021 last week, is healing, making its Dai savings smart contract available to users again, and compensating victims of its recent hack. Yearn has restored its yDAI vault and returned $9.7M in DAI funds to users who had their stablecoins deposited in…
Yearn Loses $11M in 2021’s First DeFi Hack
Yearn Finance, the yield aggregation protocol founded by Andre Cronje, has been hacked. One of the platform’s so-called vaults lost $11M, and the attacker got away with $2.8M. It’s the first DeFi hack of the year, after $100M worth of attacks in the sector last year, according to a report by Ciphertrace. About half of…
Insurance Protocol Cover Exploited for $9.4M
DeFi’s rising insurance protocol Cover Finance was exploited for $9.4M worth of user funds after a group of hackers used a faulty smart contract to mint quadrillions of COVER tokens. Cover Finance allows users to buy smart contract protection on supported DeFi protocols by buying CLAIM tokens that can be redeemed in the event of…
Flash Loan Attacker Drains $8M From Warp Finance
Investors are depositing millions into new DeFi protocols launched by anonymous developers, at times only to be wiped away in a hack. The latest to suffer that unfortunate fate is Warp Finance. Promising to be a money market where users can borrow and lend tokens and stablecoins representing liquidity in automated market makers, Warp rapidly…
