Ethereum

CoinsPaid

Read

<p class="is-style-lead">The BNB Smart Chain (BSC) was hit by copycat attacks caused by a vulnerability in the Vyper programming language. It mirrors the Curve Finance defi protocol exploit.</p> 
<p>Blockchain security firm BlockSec revealed that as of July 30, approximately $73,000 worth of cryptocurrencies were stolen from the BSC through three separate exploits.</p> 
<p>The latest development mirrored the ongoing exploits on Ethereum’s Curve Finance, which had already seen losses surpassing $41 million.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
   <p lang="en" dir="ltr">The sheet updated. Losses have already ~$41m!<a href="https://t.co/lCaS4uEPzm" target="_blank" rel="noopener noreferrer nofollow">https://t.co/lCaS4uEPzm</a> <a href="https://t.co/stQYNJFS7y" target="_blank" rel="noopener noreferrer nofollow">https://t.co/stQYNJFS7y</a> <a href="https://t.co/P7jG8NHnV4" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/P7jG8NHnV4</a></p>— BlockSec (@BlockSecTeam) <a href="https://twitter.com/BlockSecTeam/status/1685741725103583233?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">July 30, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>The vulnerability in question was found in Vyper versions 0.2.15, 0.2.16, and 0.3.0, which were used by various defi pools. The malfunctioning reentrancy lock in these versions enabled attackers to execute multiple functions simultaneously, leading to the possibility of draining all funds from affected contracts.</p> 
<p>Vyper, the programming language used for many web3 projects and designed for the Ethereum Virtual Machine, is believed to be widely adopted by defi protocols.</p> 
<p> You might also like: <a href="https://crypto.news/breaking-coinspaid-targeted-in-37-3-million-hack/" rel="noopener noreferrer nofollow"> CoinsPaid targeted in $37.3m hack </a> </p> 
<p>Several DeFi projects bore the brunt of these attacks. Among them, Alchemix’s alETH-ETH reported outflows of $13.6 million, PEGd’s pETH-ETH pool suffered a loss of $11.4 million, Metronome’s sETH-ETH pool was hacked for $1.6 million, and over 32 million Curve DAO (CRV) tokens, worth more than $22 million, were drained in the past 24 hours.</p> 
<p>Curve Finance, renowned for enabling the decentralized exchange of stablecoins within the Ethereum network, witnessed a sharp decline in its native CRV token’s value. The CRV token plummeted by 12.4% to $0.64 in the last 24hrs amid the chaos, raising concerns about potential liquidations, particularly for the founder of Curve, who reportedly held a borrowing position worth $70 million on Aave.</p> 
<figure class="wp-block-image size-full is-resized"> 
 <img decoding="async" src="https://crypto.news/app/uploads/2023/07/CRV_1D_graph_coinmarketcap-1.png" alt="BSC suffers $73k Vyper attack following Curve Finance exploit - 1" class="wp-image-14181945" width="938" height="645"> 
 <figcaption class="wp-element-caption">
   CRV 24hr price chart | Source: <a href="https://coinmarketcap.com/currencies/curve-dao-token/" target="_blank" rel="noopener noreferrer nofollow">CoinMarketCap</a> 
 </figcaption> 
</figure> 
<p>Since news of the exploits broke, the defi community has witnessed an intense battle between white hat and black hat hackers on-chain. Both groups have been trying to disrupt each other’s exploit attempts or their efforts to recover the stolen funds.</p> 
<p>Amid the chaos, one potential white hat hacker, known as “c0ffebabe.eth,” managed to secure some funds for safekeeping. The hacker sent an on-chain message on July 30, urging affected protocols to get in touch to coordinate the return of funds.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
   <p lang="en" dir="ltr">5M returned back to <a href="https://twitter.com/CurveFinance?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@CurveFinance</a> <a href="https://t.co/BPAvE1ZOZY" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/BPAvE1ZOZY</a></p>— KGJR (@KGJRTG) <a href="https://twitter.com/KGJRTG/status/1685800442100371457?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">July 30, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>To the relief of some victims, c0ffebabe.eth’s wallet successfully returned nearly 2,900 Ether (ETH) worth over $5 million to Curve through a transaction.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
   <p lang="en" dir="ltr">5M returned back to <a href="https://twitter.com/CurveFinance?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@CurveFinance</a> <a href="https://t.co/BPAvE1ZOZY" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/BPAvE1ZOZY</a></p>— KGJR (@KGJRTG) <a href="https://twitter.com/KGJRTG/status/1685800442100371457?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">July 30, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>Moreover, another transaction revealed the movement of 1,000 ETH to a newly-created wallet, possibly their cold wallet, for securing the recovered funds.</p> 
<p> Read more: <a href="https://crypto.news/curve-finances-stablecoin-grows-0-25-after-22m-minted/" rel="noopener noreferrer nofollow"> Curve Finance’s stablecoin grows 0.25% after $22m minted </a> </p>

BSC suffers $73k Vyper attack following Curve Finance exploit

crypto.news

Other articles published on Jul 31, 2023

Binance Exits Canadian Market Due to Increasing Crypto Regulations

Arthur Hayes, Green Flagged Bitcoin as AI’s Native Currency

HBAR Price Prediction AUG-23: Will Hedera Hashgraph Hit $1?

EXGOLAND: A Metaverse for Everyone, Anywhere

Cardano (ADA) Price Prediction 2024, 2025, 2026-2030

SEC Faces Scrutiny Over Alleged Internal Operations Flaws Following Ripple vs. SEC Case

Join our free newsletter for daily crypto updates!