MetalSwap

<blockquote>Originally written on MetalSwap’s Official Blog: MetalSwap’s R&amp;D — Improvement on Liquidator’s system</blockquote><p>In the ever-evolving world of DeFi, challenges arise, and solutions are sought. At MetalSwap, we prioritize transparency, security, and innovation. Today, we address a recent challenge involving our liquidator system and outline the steps we’re taking to enhance our platform’s resilience.</p><p><a href="https://metalswap.finance/" rel="noopener noreferrer nofollow">https://metalswap.finance/</a></p><h2 id="header-0">A Brief Overview</h2><p>Recently, our system faced an unexpected issue involving the single liquidator that was running on the MetalSwap system. For a brief period, the liquidation and execution of open positions were temporarily halted. The issue was caused by an external security breach affecting the address of a third party acting as a liquidator.</p><h2 id="header-1">Understanding the Liquidator System</h2><p>The liquidator system is an integral part of MetalSwap’s infrastructure. It ensures the timely execution and liquidation of open positions, safeguarding the interests of our users. Evidence from <a href="https://blog.metalswap.finance/exploring-chainlink-automation" rel="noopener noreferrer nofollow">this article</a> highlights the need to evolve the liquidation system. The initial protocol idea of decentralizing the liquidator role has been complicated by the MEV incident as explained in the article. Although we incentivized the creation of multiple liquidators during the Testnet phase, we didn’t have the same incentive in the Mainnet. The advantage of liquidators had diminished to the point of being reduced to zero. As a result, the incentive to create new liquidators has dwindled. In a situation where a liquidator is not operational, the liquidation system comes to a standstill, waiting for a resolution</p><h2 id="header-2">The Challenge</h2><p>On 15–10–2023, from 02:30 AM to 5:30 AM GMT, MetalSwap’s Liquidator faced an operational halt due to a lack of ETH to facilitate transactions. Upon investigation, it was discovered that a third-party address acting as an independent liquidator had been compromised. Furthermore, two non-critical MetalSwap-related addresses were affected: the Minter of Alphaclub NFTs and an address used on the Ethereum mainchain for promotional activities. The breach resulted in the unauthorized transfer of a small amount of ETH and other tokens from these addresses. The main result of the attack was a temporary disruption in the liquidation process on both Ethereum Mainnet and Optimism Mainnet. Following a thorough investigation into the causes of the attack, the liquidation system was promptly restored.</p><p>Here’s a brief breakdown of the affected addresses attacked and the assets stolen by the attacker:</p><ul><li>Third party Address: 0xbE5e8a3A7bC2542BbbE3b43d6071C35E195932f2</li></ul><p><a href="https://etherscan.io/tx/0x8368943817ff311df868f6111c2614188b75fd57bb0f424a2dd1a3ca5a21c548" rel="noopener noreferrer nofollow">0.06767283 ETH</a></p><ul><li>MetalSwap Alphaclub NFT Minter: 0x83473544150082a0265cB95EeFFB54E9EAf35995</li></ul><p><a href="https://etherscan.io/tx/0xd56d6c363da1dab0d9a22a85e293dab808cd52c63dbbc8c4f582b37724d67c0a" rel="noopener noreferrer nofollow">2.22065322 ETH</a></p><p><a href="https://polygonscan.com/tx/0xea85230d79fb193646a37008ee077405f28eba3b96b268d5d1696b67c89a1a69" rel="noopener noreferrer nofollow">188.46 MATIC</a></p><ul><li>MetalSwap Activities: 0x0B51F4A8Dd0f2C334BDf48759469Ca4D3eaB7724</li><li><a href="https://etherscan.io/tx/0x8c1bff060f243aa93340be4f9f2a455647fa0a9015f061198fc065de365ccc0e" rel="noopener noreferrer nofollow">0.09500519 ETH</a></li></ul><p><a href="https://bscscan.com/tx/0x3b55397299c886c15055859e73573ed86705d7ab863c39db818c946c7f8de36e" rel="noopener noreferrer nofollow">1.5646744 BNB</a></p><p><a href="https://polygonscan.com/tx/0xccdd99270fc28f5d5f1cbb674c832541be825fd61eb29ba27fe987c6656bdb1f" rel="noopener noreferrer nofollow">6.1093 MATIC</a></p><ul><li>Liquidator: 0xa5761b21b87ee5A8c51c2cfE479963e8317abc9C</li><li><a href="https://etherscan.io/tx/0xd5b1e379ae964afb4d32b3ca6a09791a11b5e0e330bff736e8931dc7f78070a0" rel="noopener noreferrer nofollow">0.3677754 ETH</a></li><li><a href="https://etherscan.io/tx/0xb809162d780ec22f117f69b5e7bec52aa32f3601727e28d476165b58de935b3b" rel="noopener noreferrer nofollow">284.88 USDT</a></li><li><a href="https://optimistic.etherscan.io/tx/0xb50e6f162d8c45d5cac586eb6ac223d0e12b73cf88ecba9fe07f9e4a31d98eac" rel="noopener noreferrer nofollow">1.73896 ETH</a></li></ul><h2 id="header-3">Immediate Actions Taken</h2><p>The MetalSwap development team acted swiftly upon identifying the breach:</p><ol><li>New Liquidator Deployment: A new liquidator was promptly set up with a different private key to ensure the Liquidator system’s uninterrupted functioning and suddenly all the pending Hedging Contracts were liquidated.</li><li>Security Enhancements: Immediate steps were taken to bolster the security of our systems and prevent similar incidents in the future.</li><li>Investigation: We are actively collaborating with cybersecurity experts to trace the unauthorized transfers and understand the breach’s full extent.</li></ol><h2 id="header-4">Addressing the Liquidator Issue</h2><p><a href="https://blog.metalswap.finance/exploring-chainlink-automation" rel="noopener noreferrer nofollow">As previously discussed at the “Spaghetti ETH” bootcamp</a> live event in Naples and in our articles, the liquidator system presents challenges in the DeFi landscape. MEV can lead to inefficiencies and potential losses for liquidators. In order to mitigate the risks associated with a single liquidator losing their keys, we have explored the possibility of integrating Chainlink Automation into our platform. By doing so, we could proactively safeguard our platform from potential issues that may arise in the event of such an occurrence</p><h2 id="header-5">Chainlink Automation: A Potential Solution</h2><p>Chainlink Automation could be the solution for automating and securing liquidation processes. We are testing this service in collaboration with Chainlink’s development team. To strengthen the system, we are considering adding more emergency liquidators, technological improvements, and community involvement to find innovative solutions. We invite our community to share ideas and suggestions on our Governance Forum to improve MetalSwap’s resilience.</p><p><em>-The DeFi Foundation</em></p><h2 id="header-6">✎ What is MetalSwap?</h2><p>MetalSwap is a decentralized platform that brings Hedging Contracts on financial markets with the aim of providing coverage to those who work with Digital Asset and an investment opportunity for those who contribute to increase the shared liquidity of the project. Allowing the protection for an increasing number of operators.</p><p>With MetalSwap we enable Hedging Contracts on the DeFi field, AMM style.</p>

METALSWAP RESEARCH&DEVELOPMENT - IMPROVEMENT ON LIQUIDATOR’S SYSTEM

Table of Contents

MetalSwap

Other articles published on Nov 10, 2023

Shibarium News: Unveiling the Future of Decentralized Finance and Blockchain Innovation

Arbitrum, Lido, Ethereum Classic, and These Altcoins May Experience a Price Surge Following ETH’s...

Ethereum, Bitcoin users reignite scalability debate as gas fees surge

Bitcoin trades above $37k: Will it reach the $40k psychological level soon?

Cold wallet

ADO Travel and Travel NFTs expected to be available in January 2024

Join our free newsletter for daily crypto updates!