Onyx

Hundred Finance

Tornado Cash

Security

The decentralized finance (DeFi) protocol Onyx lost over $2.1 million, as a cunning attacker exploited a critical vulnerability within Onyx’s codebase. This vulnerability, known as “precision loss,” was ruthlessly manipulated, resulting in substantial financial damage.&nbsp;
Security experts at BlockSec have shed light on the details of this sophisticated attack. Attacker exploits “precision loss” vulnerability 
BlockSec’s analysts have unraveled the attack, which involved theattacker exploiting a specific weakness in Onyx’s codebase through the use of an integer rounding issue, combined with a flash loan.&nbsp; 
Matthew Jiang, Director of Security Services at BlockSec, explained that the attacker initiated the attack by securing a substantial amount of Ethereum (ETH) through a <a href="https://news.todayq.com/8-5-million-platypus-flash-loan-attack-made-possible-by-code-in-wrong-order-says-auditor/" rel="noopener noreferrer nofollow">flash loan</a>. This ETH was then exchanged for the cryptocurrency PEPE and subsequently donated to a particular pool, thereby manipulating the exchange rate.
However, the attacker’s trick didn’t end there. Leveraging the so-called “precision loss” within Onyx’s code, the attacker managed to withdraw a larger portion of the underlying asset while burning fewer shares. This intricate technique allowed the attacker to siphon off a substantial amount of Onyx’s funds, resulting in a significant $2.1 million loss. History repeats: Similarities with past exploits 
Notably, this attack bears similarities to a previous exploit on Hundred Finance last year. The common thread in these two incidents is the exploitation of vulnerabilities originating from an older version of Compound V2, which Onyx incorporates into its underlying architecture.
Theattacker has attempted to cover their tracks by sending 700 ETH (equivalent to $1.25 million) to the crypto mixing service Tornado Cash, as revealed by on-chain data. Tornado Cash is a popular tool used to cover the source of cryptocurrency transactions, making it more challenging to trace the stolen funds. 
The Onyx DeFi protocol breach serves as a reminder of the<a href="https://news.todayq.com/platypus-protocol-faces-third-2023-attack-and-loses-2-2-million/" rel="noopener noreferrer nofollow"> ongoing security challenges</a> in the DeFi space. DeFi platforms must remain vigilant and continuously update their code to address vulnerabilities promptly. As attackers become more sophisticated, the need for comprehensive security audits and ongoing development is important.
© Todayq News

Report: Onyx DeFi protocol faces $2.1 million security breach

Todayq News

Other articles published on Nov 1, 2023

Bitcoin Whitepaper Celebrates 15th Anniversary As SEC Chair Calls For Compliance

Binance Completed its 15th Terra Classic Burn! Here is the Latest Amount of Burned LUNC!

XRP Price Analysis: Will Ripple’s Altcoin Break Resistance at $0.68?

Taiwan Police Conducted a Black Money Operation worth 324 Million USDT!

ShareRing Certified In The UK As A Trusted Digital Identity Services Provider

Are Ethereum Venture Capitalists Losing Hope In ETH?

Join our free newsletter for daily crypto updates!