<p>On January 3, 2024, according to Beosin EagleEye, the Radiant Capital project fell victim to a flash loan attack by an attacker. Through three transactions, the attacker stole over 1900 ETH, valued at over $4.5 million. The stolen funds are currently held in the attacker’s address, and Beosin security team promptly analyzed the incident.</p><h2 id="header-0">Vulnerability Analysis</h2><p>The root cause of this incident lies in the Radiant Capital project’s calculation of token quantity, which involves precision expansion and rounding. The attacker exploited the ability to control precision and, combined with rounding, expanded profit margins for the attack.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/7a1e9ee3bedc4e739dae1a34c9eee01b.png" /><p>In the observed code, the rayDiv function takes two uint256 data, a and b. The entire process can be simplified as (a * RAY &#43; b/2) / b, where RAY is precision expansion data, equal to 10²⁷. This results in a * RAY / b &#43; 0.5, achieving rounding functionality. The main source of error in this calculation comes from b. If b is significantly smaller than a, the error becomes negligible. However, if b is of a similar magnitude to a, the error may be substantial.</p><p>For example, if a * RAY &#61; 10000 and b &#61; 3, the calculated result is 3333, which is 1/10000 less than the actual value. If a * RAY &#61; 10000 and b &#61; 3000, the calculated result is 3, which is 1/10 less than the actual value.</p><p>In this incident, the attacker manipulated the value of b to have a similar magnitude to a, causing the calculation to be equivalent to 3/2.0001 &#61; 1. The calculated value is 1/3 less than the actual value.</p><h2 id="header-1">Attack Process</h2><ol><li>The attacker initially borrowed 3 million USDC through an AAVE flash loan as the startup capital for the attack.</li></ol><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/efb8148cdaac460cba799fd4d18bf10c.png" /><p>2. 2 million USDC was pledged to the Radiant contract, and the attacker obtained 2 million rUSDCn token certificates.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/4ecefc1b9a8049ab8294943da260ca14.png" /><p>3. The attacker used a flash loan through the Radiant contract to borrow 2 million USDC. In the callback function, 2 million USDC was repaid, simultaneously extracting the pledged USDC from the second step. The flash loan function called the transferfrom function, transferring the attacker’s USDC into the contract, with a 9/10000 fee collected as liquidity for the pool.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/020835aa2ff44df88b5cfe9dbd779405.png" /><p>4. By repeating step 3, the attacker controlled the liquidityIndex to a large extent, reaching liquidityIndex&#61;271800000000999999999999998631966035920.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/8b083c2baf844f6a80b0cb4aa246cdc4.png" /><p>5. Subsequently, the attacker created a new contract and deposited 543,600 USDC into it. This amount corresponds to twice the liquidityIndex value from step 4, facilitating rounding control.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/304640cc18c84e7d995fe76674be6c3f.png" /><p>6. The attacker pledged all 543,600 USDC into the Radiant contract, obtaining an equivalent amount of rUSDCn.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/a3232249f7704f32994564088504e79e.png" /><p>7. The attacker withdrew 407,700 USDC. Although 407,700 rUSDCn should have been burned, as mentioned above, the burn function involved precision expansion and rounding calculations. 407700000000000000000000000000000000000/271800000000999999999999998631966035920 &#61; 1.49999999, but rounding results in 1, causing the result to be 1/3 smaller than the actual value. As shown below, instead of burning 407,700, only 271,800 was burned, allowing the attacker to withdraw 407,700 USDC.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/da76a40e72a64f568a0a1b5886d6b8bc.png" /><h2 id="header-2">Funds Tracking</h2><p>As of the time of writing, the stolen 1902 ETH remains in the hacker’s address without movement. Beosin Trace will continue monitoring the funds.</p><img src="https://academy-public.coinmarketcap.com/srd-optimized-uploads/d8baf22d07da4191b4c728f292a93528.png" /><p>As 2024 begins, we have witnessed two high-value theft cases. (Review of yesterday’s security incident: What happened in the first case of the year, the $80 million theft of Orbit Chain?) This series of events serves as a reminder that in the Web3 ecosystem, security precautions remain crucial!</p><h2 id="header-3">Contact</h2><p>If you need any blockchain security services, welcome to contact us:</p><p><a href="https://beosin.com/" rel="noopener noreferrer nofollow">Official Website</a> <a href="https://www.beosin.com/resources/www.eagleeye.space" rel="noopener noreferrer nofollow">Beosin EagleEye</a> <a href="https://twitter.com/Beosin_com" rel="noopener noreferrer nofollow">Twitter</a> <a href="https://t.me/beosin" rel="noopener noreferrer nofollow">Telegram</a> <a href="https://www.linkedin.com/company/beosin" rel="noopener noreferrer nofollow">Linkedin</a></p>

How Radiant Capital Was Exploited by Hackers for a $4.5 Million Heist!

Table of Contents

Beosin

Other articles published on Jan 4, 2024

Goldman Sachs Explores Bitcoin ETFs Alongside BlackRock and Grayscale

The Road to Digital Euro: ECB Publishes Crucial Rulebook Draft

Blockfolio and Celsius PPP loans forgiven before bankruptcy

Decentralized exchange dYdX exposes details of $9 million attack on its v3 platform

BSV Price Tumble 12%; Time To Accumulate Bitcoin SV at Cheap Rate?

LINK Comes Back Fighting: Chainlink Technical Analysis Post Market Crisis

Join our free newsletter for daily crypto updates!