Ethereum

Onyx

The <a href="https://blockchainreporter.net/defi/" rel="noopener noreferrer nofollow">decentralized finance (DeFi)</a> project Onyx Protocol has fallen victim to an exploit resulting in the loss of nearly $2 million worth of Ethereum (ETH), according to findings by blockchain analytics company PeckShield. This unfortunate incident highlights the ongoing challenges faced by the DeFi ecosystem in terms of security.<h2 id="header-0">Onyx Protocol’s $2 Million Hack</h2>PeckShield, a renowned blockchain security and data analytics company, disclosed the details of the exploit, which amounted to a staggering $2.1 million loss. In a series of tweets, the firm outlined the key aspects of the incident and provided insights into how the exploit occurred. “The Onyx Protocol hack leads to ~$2.1M loss by exploiting a known rounding issue behind the popular CompoundV2 fork,” PeckShield tweeted.The tweet further added, “Basically, the exploited oPEPE market was deployed 5 days ago without any <a href="https://blockchainreporter.net/glossary/liquidity/" rel="noopener noreferrer nofollow">liquidity</a>. This empty market was abused with donations to borrow funds from other markets with liquidity. The donated funds were then redeemed by exploiting the known rounding issue. Note the same bug was exploited in an earlier #HundredFinance hack with ~$7M loss.”The breach highlights a significant vulnerability in the Onyx Protocol, which allowed malicious actors to take advantage of the project’s <a href="https://blockchainreporter.net/glossary/smart-contract/" rel="noopener noreferrer nofollow">smart contract</a> code, ultimately leading to substantial loss. It is a stark reminder that even DeFi projects built on robust protocols can still face security challenges and vulnerabilities.<a href="https://peckshield.com/" rel="noopener noreferrer nofollow">PeckShield</a> also reported that the wallet address associated with the Onyx Protocol exploiter now holds a balance of 1,164 ETH, approximately equivalent to $2.1 million. Furthermore, the exploiter has taken action to move the stolen funds to a new wallet address, as PeckShield reported in another <a href="https://x.com/PeckShieldAlert/status/1719662438226985274?s&#61;20" rel="noopener noreferrer nofollow">tweet</a>: “Onyx Protocol Exploiter has moved the stolen funds (~$2.1M) to a new address 0x4C9C…0c98.”In an effort to obfuscate the origins of the stolen funds, the exploiter has also reportedly laundered 100 ETH using TornadoCash, a privacy-focused Ethereum mixer, as <a href="https://x.com/PeckShieldAlert/status/1719667697674543116?s&#61;20" rel="noopener noreferrer nofollow">noted</a> by PeckShield. As of now, the Onyx Protocol team has not released an official statement addressing the incident. The community and DeFi enthusiasts are eagerly awaiting further details on the breach and the steps that will be taken to mitigate its impact.This incident serves as a stark reminder of the ongoing security challenges within the DeFi space. While DeFi offers numerous benefits and opportunities, it also comes with a higher degree of risk, and developers and projects must remain vigilant in identifying and addressing vulnerabilities in their code to prevent such exploits in the future.

Onyx Protocol Exploited: PeckShield Reports $2M Ethereum Theft

Table of Contents

BlockchainReporter

Other articles published on Nov 1, 2023

Elon Musk’s X Announces Bold Move to Combat Misinformation

Onyx Protocol exploiter begins siphoning $2.1M loot on Tornado Cash

TMUS Stock Price Prediction 2023, 2024, 2025: Will TMUS Escape $150?

TRON emerges as go-to blockchain for stablecoin transfers

‘Stand With Crypto’ Receives $2M in Funds from Crypto Community

“Block Harmful US SEC Crypto Accounting Rule”: Republican Lawmakers

Join our free newsletter for daily crypto updates!