On the evening of July 30th, 2023, multiple projects encountered a dark moment.At around 21:35 on July 30th, according to Beosin&#39;s EagleEye security risk monitoring, the NFT lending protocol JPEG&#39;d was attacked.While the Beosin security team was analyzing the situation, several other projects were attacked in succession.At around 22:51 on July 30th, the msETH-ETH pool was raided by hackers.At around 23:35 on July 30th, the alETH-ETH pool was also cracked using the same attack method.Shortly after, liquidity pools belonging to DeFi projects Alchemix and Metronome were successively attacked.<h2 id="header-0">The root reason of these multiple attacks is Vyper?</h2>According to a tweet from the Ethereum programming language Vyper on July 31st, Vyper versions 0.2.15, 0.2.16, and 0.3.0 have vulnerabilities in their reentrancy locks. Combined with the ability of native ETH to call callback function during transfers, liquidity pools with native ETH created by these versions can be hacked by reentrancy attacks.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_643431_C0aote8qiEuWDCWz_1690801463?w&#61;599&amp;h&#61;250&amp;type&#61;image/png" />Curve&#39;s official Twitter then stated that many stablecoin pools (alETH/msETH/pETH) using Vyper 0.2.15 were attacked due to reentrancy lock failures, but other pools are safe.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_353467_rkvgBuxza_Faa8pb_1690801560?w&#61;615&amp;h&#61;388&amp;type&#61;image/png" /><h2 id="header-1">Analysis by Beosin Security Team on the Attacked Projects.</h2>Here are the relevant transactions related to the hacking incident:●Attack Transaction:0xc93eb238ff42632525e990119d3edc7775299a70b56e54d83ec4f53736400964 0xb676d789bb8b66a08105c844a49c2bcffb400e5c1cfabd4bc30cca4bff3c98010xa84aa065ce61dbb1eb50ab6ae67fc31a9da50dd2c74eefd561661bfce2f1620c0x2e7dc8b2fb7e25fd00ed9565dcc0ad4546363171d5e00f196d48103983ae477c0xcd99fadd7e28a42a063e07d9d86f67c88e10a7afe5921bd28cd1124924ae2052●Attacker&#39;s Address0xC0ffeEBABE5D496B2DDE509f9fa189C25cF296710xdce5d6b41c32f578f875efffc0d422c57a75d7d80x6Ec21d1868743a44318c3C259a6d4953F99785380xb752DeF3a1fDEd45d6c4b9F4A8F18E645b41b324●Attacked Contracts0xc897b98272AA23714464Ea2A0Bd5180f1B8C00250xC4C319E2D4d66CcA4464C0c2B32c9Bd23ebe784e0x9848482da3Ee3076165ce6497eDA906E66bB85C50x8301AE4fc9c624d1D396cbDAa1ed877821D7C511<h3 id="vulnerability-analysis">Vulnerability Analysis</h3>According to Beosin security team, the main cause of this attack was the failure of the reentrancy lock in Vyper 0.2.15. Attackers added liquidity by reentering the add_liquidity function when removing liquidity using the remove_liquidity function of the related liquidity pools. Due to the balance update occurring before reentry into the add_liquidity function, price calculation errors occurred.<h3 id="attack-process">Attack Process</h3>We take the msETH-ETH-f pool attacked by transaction 0xc93eb238f as an example.In the preparation stage, the hacker first flash loaned 10,000 ETH through the Balancer:Vault as attack funds.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_801637_lA_jeX-Ot4Law4Lg_1690802166?w&#61;958&amp;h&#61;268&amp;type&#61;image/png" /><h3 id="attack-stage">Attack Stage</h3>1. In the first step, the attacker called the add_liquidity function to add the 5000 ETH flash loan to the pool.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_992763_aepXKFwJcLrpNIkj_1690802223?w&#61;1080&amp;h&#61;103&amp;type&#61;image/png" />2. In the second step, the attacker called the remove_liquidity function to remove the ETH liquidity from the pool and then reentered the add_liquidity function to add liquidity.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_203028_6k0m9-53-GC3NvZb_1690802233?w&#61;1080&amp;h&#61;110&amp;type&#61;image/png" />3. Due to the balance update occurring before reentry into the add_liquidity function, price calculation errors occurred. It is worth noting that both the remove_liquidity function and the add_liquidity function have used reentrancy locks to prevent reentry.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_245530_t1sXz24ae-lgSM2s_1690802302?w&#61;1080&amp;h&#61;1048&amp;type&#61;image/png" /><img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_145912_4LK__ViLWuLOhUg7_1690802311?w&#61;658&amp;h&#61;418&amp;type&#61;image/png" />4. Therefore, the reentrancy lock was not effective here. By reading the vulnerable Vyper code shown below, it can be found that when the name of the reentrancy lock appears for the second time, the original number of storage_slot will increase by 1. In other words, the slot that originally acquired the lock is 0, but after another function uses the lock, the slot becomes 1, and the reentrancy lock already fails.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_159354_cEOMULHsXE0uYqx0_1690802430?w&#61;1080&amp;h&#61;370&amp;type&#61;image/png" /><a href="https://github.com/vyperlang/vyper/commit/eae0eaf86eb462746e4867352126f6c1dd43302f" rel="noopener noreferrer nofollow">Fix unused storage slots (#2439) · vyperlang/vyper&#64;eae0eaf · GitHub</a><h2 id="header-2">Funds Statistics</h2>At the time of publication, the funds lost in this attack have exceeded $59 million. Beosin KYT has monitored that the c0ffeebabe.eth address has returned 2879 ETH, but the stolen funds remain on multiple attacker addresses.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_957434_YDB_Wzo1DxJo6_Eb_1690802665?w&#61;1080&amp;h&#61;238&amp;type&#61;image/png" /><h2 id="header-3">Subsequent Impact</h2>Regarding the impact of this event, on July 31st, Binance founder CZ tweeted that &#34;CEX price feed saves DeFi.&#34; Binance users were not affected, and the Binance team checked on the Vyper reentrancy vulnerability. Binance only uses version 0.3.7 or above. It is important to keep the codebase, applications, and operating systems up to date.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_252140_jHkmUgqkOnmx4zZz_1690802732?w&#61;602&amp;h&#61;254&amp;type&#61;image/png" />On July 31st, Curve tweeted that due to problems with the Vyper compiler in versions 0.2.15-0.3.0, CRV/ETH, alETH/ETH, msETH/ETH, and pETH/ETH were attacked by hackers. Additionally, the Arbitrum Tricrypto pool may also be affected. Auditors and Vyper developers have not yet found exploitable vulnerabilities, but users are advised to remove their liquidity from the pool.It can be seen that the impact of this event has not yet ended, and users who have funds in these pools need to pay more attention.<img src="https://wdcdn.qpic.cn/MTY4ODg1NzYyNjQxMjMwNg_793775_3OeQIoVnBNehB8Kq_1690802835?w&#61;584&amp;h&#61;350&amp;type&#61;image/png" />Regarding this event, Beosin security team recommends that the reentrancy locks in Vyper versions 0.2.15, 0.2.16, and 0.3.0 all fail and related projects are advised to check for themselves. After a project is launched, it is strongly recommended that the project team continues to pay attention to vulnerability disclosures of third-party components/dependency libraries and timely avoid security risks.Beosin is a leading global blockchain security company co-founded by several professors from world-renowned universities and there are 40&#43; PhDs in the team, and set up offices in 10&#43; cities including Hong Kong, Singapore, Tokyo and Miami. With the mission of “Securing Blockchain Ecosystem”, Beosin provides “All-in-one” blockchain security solution covering Smart Contract Audit, Risk Monitoring &amp; Alert, KYT/AML, and Crypto Tracing. Beosin has already provided security for 2000&#43; blockchain companies, audited more than 3000 smart contracts and protected our customers’ assets worth of $500 billion.<h2 id="header-4">Contact</h2>If you need any blockchain security services, welcome to contact us:<a href="https://beosin.com/" rel="noopener noreferrer nofollow">Official Website</a> <a href="https://eagleeye.beosin.com/ProjectSearch" rel="noopener noreferrer nofollow">Beosin EagleEye</a> <a href="https://twitter.com/Beosin_com" rel="noopener noreferrer nofollow">Twitter</a> <a href="https://t.me/beosin" rel="noopener noreferrer nofollow">Telegram</a> <a href="https://www.linkedin.com/company/beosin" rel="noopener noreferrer nofollow">Linkedin</a>

Are Your Funds Safe? Multiple Projects Attacked Due to Vyper Reentrancy Vulnerability with a total loss of more than $59 Million

Table of Contents

Beosin

Other articles published on Jul 31, 2023

Curve Finance’s Cryptocurrency Assets Decline by $1.5 Billion After the Attack

DeFi Ecosystem Rocked by Curve Finance Exploit, Leads to Borrowing Changes

Harga ETH Diramalkan Tembus US$2500 Tahun 2023

ADA, SOL, DOT, LUNC & DOGE: Technical Analysis for August

From Crypto to Quantum: Investing in 2023's Future

Shiba Inu Lead Shytoshi Kusama Makes Major BONE Minting Move

Join our free newsletter for daily crypto updates!