Arbitrum

ConcentricFi, an Arbitrum-based liquidity management protocol, has officially acknowledged a <a href="https://optimisus.com/news/crypto-news/hackers-tries-to-steal-over-15-billion-in-xrp-from-bitfinex-fails/" rel="noopener noreferrer nofollow">security breach</a> on its smart contract.  
The incident, first reported by blockchain security firm CertiK, caused an estimated $1.6 million in damages.  
The exploit targeted ConcentricFi's vault approvals, prompting the protocol to advise users to revoke all permissions and stop interacting.  
The security breach was discovered following an alert from CertiK, which assessed the damages based on its analysis of the threat actor's wallet.  
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 https://twitter.com/ConcentricFi/status/1749418658818830622?s=20
 </div>
</figure>  
CertiK identified wallet address 0x5A58D1a81c73Dc5f1d56bA41e413Ee5288c65d7F, which was previously linked to the OKX exploit on December 13, 2023, as the most likely culprit in the ConcentricFi breach.  
ConcentricFi runs an automated liquidity management platform on the Arbitrum blockchain. Using Camelot v3, the protocol employs an algorithm to direct assets toward high-yield investment opportunities.  
Concentric Vaults, a key feature, allows users to deposit liquidity provider (LP) tokens while the protocol maximizes yield through strategic asset reallocation.  
The first attack vector was social engineering, in which the threat actor compromised the wallet of a team member with deployer and upgrade privileges.  
Using this access, the attacker updated the vault contracts' code, introducing three ConeCamelotVault contracts.  
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 https://twitter.com/ConcentricFi/status/1749428275582022081?s=20
 </div>
</figure>  
Malicious code was inserted into these upgraded contracts, allowing for the creation of new LP tokens and the subsequent drain of funds from the vault. 
The post <a href="https://optimisus.com/news/crypto-news/this-arbitrum-based-liquidity-management-protocol-loses-1-6-million-to-hackers/" rel="noopener noreferrer nofollow">This Arbitrum-based liquidity management protocol loses $1.6 million to hackers</a> appeared first on <a href="https://optimisus.com" rel="noopener noreferrer nofollow">Optimisus</a>.

This Arbitrum-based liquidity management protocol loses $1.6 million to hackers

Optimisus

Other articles published on Jan 23, 2024

Bitcoin at a Critical Juncture: The Role of Fibonacci Levels in Price Movements

Choosing the best crypto profit calculator apps in 2024

Aave V3 Ready For Solana After This Crucial Vote Passed

Attention Traders!!! Fresh FUD May Knock into the Crypto Space; Will BTC Price Plunge Below $35,000?

Crypto crash: Bitcoin drops below $40K as chatter quiets down

Why is crypto down today? The GBTC selloff

Join our free newsletter for daily crypto updates!