Arbitrum

ConcentricFi, an Arbitrum-based liquidity management protocol, has officially acknowledged a <a href="https://optimisus.com/news/crypto-news/hackers-tries-to-steal-over-15-billion-in-xrp-from-bitfinex-fails/" rel="noopener noreferrer nofollow">security breach</a> on its smart contract.  
The incident, first reported by blockchain security firm CertiK, caused an estimated $1.6 million in damages.  
The exploit targeted ConcentricFi's vault approvals, prompting the protocol to advise users to revoke all permissions and stop interacting.  
The security breach was discovered following an alert from CertiK, which assessed the damages based on its analysis of the threat actor's wallet.  
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 https://twitter.com/ConcentricFi/status/1749418658818830622?s=20
 </div>
</figure>  
CertiK identified wallet address 0x5A58D1a81c73Dc5f1d56bA41e413Ee5288c65d7F, which was previously linked to the OKX exploit on December 13, 2023, as the most likely culprit in the ConcentricFi breach.  
ConcentricFi runs an automated liquidity management platform on the Arbitrum blockchain. Using Camelot v3, the protocol employs an algorithm to direct assets toward high-yield investment opportunities.  
Concentric Vaults, a key feature, allows users to deposit liquidity provider (LP) tokens while the protocol maximizes yield through strategic asset reallocation.  
The first attack vector was social engineering, in which the threat actor compromised the wallet of a team member with deployer and upgrade privileges.  
Using this access, the attacker updated the vault contracts' code, introducing three ConeCamelotVault contracts.  
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 https://twitter.com/ConcentricFi/status/1749428275582022081?s=20
 </div>
</figure>  
Malicious code was inserted into these upgraded contracts, allowing for the creation of new LP tokens and the subsequent drain of funds from the vault. 
The post <a href="https://optimisus.com/news/crypto-news/this-arbitrum-based-liquidity-management-protocol-loses-1-6-million-to-hackers/" rel="noopener noreferrer nofollow">This Arbitrum-based liquidity management protocol loses $1.6 million to hackers</a> appeared first on <a href="https://optimisus.com" rel="noopener noreferrer nofollow">Optimisus</a>.

This Arbitrum-based liquidity management protocol loses $1.6 million to hackers

Optimisus

Other articles published on Jan 23, 2024

Analyst Forecasts XRP’s Bullish Track to Reach $27 Despite Recent Dips

Meme Coin Mania: Avalanche Foundation Sets Guidelines for Meme Coin Acquisitions

Aave V3 Ready For Solana After This Crucial Vote Passed

Sevilla FC Partners with IBM’s AI for Player Scouting

Pushd (PUSHD) Presale Frenzy Has Optimism (OP) and Solana (SOL) Investors Buying In

Bitcoin Price Prediction: Recovery or Deeper Dip Looms Ahead

Join our free newsletter for daily crypto updates!