Ethereum

CoinsPaid

<div class="cryptonews"> 
 <p class="is-style-lead">The BNB Smart Chain (BSC) was hit by copycat attacks caused by a vulnerability in the Vyper programming language. It mirrors the Curve Finance defi protocol <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a>.</p> 
 <p>Blockchain security firm BlockSec revealed that as of July 30, approximately $73,000 worth of cryptocurrencies were stolen from the BSC through three separate <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a>s.</p> 
 <p>The latest development mirrored the ongoing <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a>s on Ethereum’s Curve Finance, which had already seen losses surpassing $41 million.</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
    <p lang="en" dir="ltr">The sheet updated. Losses have already ~$41m!https://t.co/lCaS4uEPzm https://t.co/stQYNJFS7y pic.twitter.com/P7jG8NHnV4</p>— BlockSec (@BlockSecTeam) July 30, 2023 
   </blockquote> 
  </div> 
 </figure> 
 <p>The vulnerability in question was found in Vyper versions 0.2.15, 0.2.16, and 0.3.0, which were used by various defi pools. The malfunctioning reentrancy lock in these versions enabled attackers to execute multiple functions simultaneously, leading to the possibility of draining all funds from affected contracts.</p> 
 <p>Vyper, the programming language used for many web3 projects and designed for the Ethereum Virtual Machine, is believed to be widely adopted by defi protocols.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> CoinsPaid targeted in $37.3m hack 
 </div> 
 <p>Several DeFi projects bore the brunt of these attacks. Among them, Alchemix’s alETH-ETH reported outflows of $13.6 million, PEGd’s pETH-ETH pool suffered a loss of $11.4 million, Metronome’s sETH-ETH pool was hacked for $1.6 million, and over 32 million Curve DAO (CRV) tokens, worth more than $22 million, were drained in the past 24 hours.</p> 
 <p>Curve Finance, renowned for enabling the decentralized exchange of stablecoins within the Ethereum network, witnessed a sharp decline in its native CRV token’s value. The CRV token plummeted by 12.4% to $0.64 in the last 24hrs amid the chaos, raising concerns about potential liquidations, particularly for the founder of Curve, who reportedly held a borrowing position worth $70 million on Aave.</p> 
 <figure class="wp-block-image size-full is-resized"> 
  <img decoding="async" loading="lazy" src="https://cdn.thebittimes.com/images/2023/07/31/1948f18d1e39d52331aa8f4b43eb0a45.webp" alt="BSC suffers $73k Vyper attack following Curve Finance exploit - 1" class="wp-image-14181945" width="938" height="645"> 
  <figcaption class="wp-element-caption">
    CRV 24hr price chart | Source: CoinMarketCap 
  </figcaption> 
 </figure> 
 <p>Since news of the <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a>s broke, the defi community has witnessed an intense battle between white hat and black hat hackers on-chain. Both groups have been trying to disrupt each other’s <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a> attempts or their efforts to recover the stolen funds.</p> 
 <p>Amid the chaos, one potential white hat hacker, known as “c0ffebabe.eth,” managed to secure some funds for safekeeping. The hacker sent an on-chain message on July 30, urging affected protocols to get in touch to coordinate the return of funds.</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
    <p lang="en" dir="ltr">5M returned back to @CurveFinance pic.twitter.com/BPAvE1ZOZY</p>— KGJR (@KGJRTG) July 30, 2023 
   </blockquote> 
  </div> 
 </figure> 
 <p>To the relief of some victims, c0ffebabe.eth’s wallet successfully returned nearly 2,900 Ether (ETH) worth over $5 million to Curve through a transaction.</p> 
 <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
  <div class="wp-block-embed__wrapper"> 
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
    <p lang="en" dir="ltr">5M returned back to @CurveFinance pic.twitter.com/BPAvE1ZOZY</p>— KGJR (@KGJRTG) July 30, 2023 
   </blockquote> 
  </div> 
 </figure> 
 <p>Moreover, another transaction revealed the movement of 1,000 ETH to a newly-created wallet, possibly their cold wallet, for securing the recovered funds.</p> 
 <div class="cn-block-related-link"> 
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"> <use xlink:href="#"></use> 
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Curve Finance’s stablecoin grows 0.25% after $22m minted 
 </div> <span class="google-news-banner__label">Follow Us on Google News</span> 
</div>

BSC suffers $73k Vyper attack following Curve Finance exploit

TheBitTimes

Other articles published on Aug 1, 2023

Former MtGox CEO Makes Revelation That May Excite Creditors

Bank of Korea Explores Jeju, Busan, and Incheon for Citizen-Centric CBDC Pilot Test

Vyper vulnerability exposes DeFi ecosystem to stress tests

Create a Decentralized Website and Host it With These Easy Steps

Weekly Cryptocurrency Market Analysis: Altcoins Reach New Highs And Lows

FTX Crypto Exchange Plans Relaunch for Global Audience, FTT Token Soars 10% Amid Developments

Join our free newsletter for daily crypto updates!