Raft

Stablecoin

David

<div class="fintechs">
 <figure class="wp-block-image size-full"><img decoding="async" width="640" height="336" src="https://cdn.thebittimes.com/images/2023/11/12/bca871813d801bc377c18650b3ebf740.webp" alt="" class="wp-image-42684" srcset="https://cdn.thebittimes.com/images/2023/11/12/1831e7641d767d0dea4506e942c5035b.webp 750w, https://cdn.thebittimes.com/images/2023/11/12/1831e7641d767d0dea4506e942c5035b.webp 300w" sizes="(max-width: 640px) 100vw, 640px" data-recalc-dims="1">
 </figure>
 <p class=""><strong>In a startling turn of events, Raft, a prominent decentralised finance (DeFi) platform, recently faced a security breach that led to a $3.3 million exploit, resulting in the depegging of its stablecoin, R. This incident sent shockwaves through the crypto community, highlighting the vulnerability of DeFi platforms.</strong> However, as we delve deeper into the details, it becomes clear that the hacker behind the attack might have incurred substantial losses, offering a glimmer of hope for Raft and its users.</p>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Important Update<br><br>The Raft protocol recently experienced a complex security incident that resulted in the minting of ~$6.7M unbacked R.<br><br>The hacker subsequently sold R, affecting R’s price.https://t.co/WvVjyVUHh3</p>— Raft (@raft_fi) November 11, 2023
   </blockquote>
  </div>
 </figure>
 <h2 class="wp-block-heading" id="strong-the-exploit-and-its-aftermath-strong"><strong>The Exploit and its Aftermath</strong></h2>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">absolutely unhinged<br>1. hacker pulled 18 ETH from tornado cash<br>2. hacked a total of 1,577 ETH<br>3. burned 1,570 ETH and sent remaining 7 ETH to themselves<br>4. After fees, they're left with 14 ETH<br><br>So total profit after fees is -4 ETH<br><br>mf might go to jail to LOSE 4 ETH</p>— 0xngmi (@0xngmi) November 10, 2023
   </blockquote>
  </div>
 </figure>
 <p class="">On the fateful day, Raft suffered a significant breach, with the attacker managing to drain 1,577 ETH from the platform. The stolen assets, however, did not end up in the attacker’s hands. Instead, a coding error led to these funds being sent to a null address, rendering them inaccessible. This unusual twist meant that the attacker only walked away with a meagre 7 ETH, ultimately facing a net loss of 4 ETH on the entire operation.</p>
 <p class="">Raft’s native stablecoin, R, bore the brunt of the exploit, as it quickly lost its dollar peg, plummeting by as much as 50%. The coin, typically valued at $1, was trading at a mere $0.18 at its lowest point before eventually stabilising around $0.70.</p>
 <h2 class="wp-block-heading" id="strong-the-hacker-s-unconventional-actions-strong"><strong>The Hacker’s Unconventional Actions</strong></h2>
 <p class="">In a departure from the typical modus operandi of crypto hackers, the individual responsible for this exploit exhibited unusual behaviour. Instead of attempting to obscure the stolen funds using crypto mixers, the hacker unexpectedly moved by burning 1,570 ETH in a subsequent transaction. This move left them with a mere 14 ETH, reflecting the hacker’s surprising willingness to incur losses.</p>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">1/6<br><br>Sad, but @raft_fi was exploited, and the attacker was able to mint 6.7 uncollateralized R stablecoin<br><br>The twist is that they converted them into ETH, which was sent to the null address, but first things firsthttps://t.co/q6U5fyRek9</p>— Igor Igamberdiev (@FrankResearcher) November 10, 2023
   </blockquote>
  </div>
 </figure>
 <p class="">Igor Igamberdiev, Wintermute’s Head of Research, shed light on the exploit’s technical details. The attacker utilised interconnected contracts and initially minted 3,000 R tokens using only two cbETH. Subsequently, a 1,000 ETH flash loan was taken to manipulate the inflation index logic. However, the critical error occurred when the code for converting R to ETH was called from a separate contract with a parent contract that lacked receiver contract details. This misstep resulted in the diverted ETH being sent to a null address, effectively nullifying the attacker’s gains.</p>
 <h2 class="wp-block-heading" id="strong-raft-s-response-and-recovery-strong"><strong>Raft’s Response and Recovery</strong></h2>
 <figure class="wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter">
  <div class="wp-block-embed__wrapper">
   <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
    <p lang="en" dir="ltr">Update: Further minting of R has been paused.<br><br>Existing users are still able to repay their positions and receive their collateral. https://t.co/0cE6MhfNos</p>— Raft (@raft_fi) November 10, 2023
   </blockquote>
  </div>
 </figure>
 <p class="">Raft’s co-founder, David Garai, acknowledged the attack and assured users that efforts were underway to mitigate the damage. The protocol-owned sDAI in the Peg Stability Module is being leveraged to restore affected users’ funds. While this incident highlights the vulnerabilities within the DeFi space, it also underscores the resilience of platforms like Raft in responding to such challenges.</p>
 <h2 class="wp-block-heading" id="strong-conclusion-strong"><strong>Conclusion</strong></h2>
 <p class="">The Raft exploit is a stark reminder of the ever-present risks in the world of DeFi. While the initial shockwave of the attack led to the depegging of the R stablecoin, the hacker’s unexpected losses offer a silver lining. This incident emphasises the importance of robust security measures within the DeFi sector and showcases the determination of platforms like Raft to safeguard their users’ interests. As the crypto community watches closely, the industry’s response to such events will undoubtedly shape the future of decentralised finance.</p> 
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/raft-defi-platform-recovers-after-3-3m-exploit-and-stablecoin-depegging-tbt69966.html">https://thebittimes.com/raft-defi-platform-recovers-after-3-3m-exploit-and-stablecoin-depegging-tbt69966.html</a></p>

Raft DeFi Platform Recovers After $3.3M Exploit and Stablecoin Depegging

Table of Contents

TheBitTimes

Other articles published on Nov 11, 2023

Super Mario RPG for Switch Leaked Ahead of Official Launch

CME Surpasses Binance to Claim Dominance in Bitcoin Futures Trading

Solana Finally Breaks 18-Month High Amid Positive Onchain Metrics – This Could Be the Next SOL Ta...

Gas Price Skyrockets by Over 711% in Two Weeks: Here’s Why

Bitcoin Transaction Fees on the Rise Again

Shiba Price Prediction: How High Will SHIB Go?

Join our free newsletter for daily crypto updates!