Raft

Balancer

lisUSD

<div class="sg-post-des">
 The project was previously audited by Trail of Bits and Hats Finance.
</div>
<div class="cointelegraph">
 <p>Decentralized U.S. dollar stablecoin protocol Raft claims that despite multiple security audits, the firm still suffered a security <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a> <a rel="noopener noreferrer nofollow" title="leading" href="https://thebittimes.com/tag/leading.html">leading</a> to the loss of $6.7 million last week.</p>
 <p>According to the project's Nov. 13 post-mortem report, a few days prior, a hacker borrowed 6,000 Coinbase-wrapped staked Ether (cbETH) on decentralized finance protocol Aave, transferred the sum to Raft, and minted 6.7 million Raft stablecoin, dubbed "R," using a smart contract glitch.</p>
 <p>The unauthorized minted funds were then swapped off the platform through liquidity pools on decentralized exchanges Balancer and Uniswap, netting $3.6 million in proceeds. The R stablecoin depegged after the attack.&nbsp;</p>
 <p>According to the report:</p>
 <blockquote>
  "The primary root cause was a precision calculation issue when minting share tokens, which enabled the exploiter to obtain extra share tokens. The attacker leveraged the amplified index value to increase the worth of their shares."
 </blockquote>
 <p>The smart contracts exploited during the incident were audited by blockchain security firms Trail of Bits and Hats Finance. "Unfortunately, the vulnerabilities that led to the incident were not detected in these audits," Raft developers wrote.</p>
 <p>The project says that since the Nov. 10 incident it has filed a police report and is currently working with centralized exchanges to track down the flow of the stolen funds. All Raft's smart contracts are currently suspended, though users who minted R "retain the ability to repay their positions and retrieve their collateral."</p>
 <p>Decentralized stablecoins are minted using users' crypto deposits as collateral. Last December, decentralized stablecoin HAY depegged against the U.S. dollar after a hacker&nbsp;took advantage of a smart contract glitch and minted 16 million HAY without proper collateral. The HAY stablecoin has since re-pegged, in part, due to the protocol requiring a collateralization ratio of 152% at the time of <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a> as part of risk management.&nbsp;</p>
 <blockquote class="twitter-tweet">
  <p lang="en" dir="ltr">We are aware of a potential security <a rel="noopener noreferrer nofollow" title="vulnerability" href="https://thebittimes.com/tag/vulnerability.html">vulnerability</a>. <br><br>We are currently investigating and will provide an update as soon as we can.</p>— Raft (@raft_fi) November 10, 2023
 </blockquote>
 <p><strong>Related:&nbsp;September becomes the biggest month for crypto <a rel="noopener noreferrer nofollow" title="exploit" href="https://thebittimes.com/tag/exploit.html">exploit</a>s in 2023</strong></p>
 <template data-name="subscription_form" data-type="defi_newsletter"></template>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/defi-vulnerability-leading-to-6-7m-exploit-not-detected-by-auditors-tbt70129.html">https://thebittimes.com/defi-vulnerability-leading-to-6-7m-exploit-not-detected-by-auditors-tbt70129.html</a></p>

DeFi vulnerability leading to $6.7M exploit 'not detected' by auditors

TheBitTimes

Other articles published on Nov 13, 2023

Bitcoin Price Consolidates And Signals Potential Surge To $40,000

Polygon Price Analysis: Institutional Interest Drives Massive Surge in MATIC Transaction Volume

Why Is Russia Coming After Coinbase Now?

World Tokenization Summit Returns for Second Edition: Focused on Real World Asset Tokenization in...

Coinbase Expands Futures Trading with SOL and AVAX Perpetuals

Ulster University Professor’s VR Program Revolutionizes Goalkeeping Training

Join our free newsletter for daily crypto updates!