2024

Seneca

Bitcoin

Read

<p class="is-style-lead">Seneca Protocol saw a significant security breach, resulting in a dramatic 65% drop in the value of its native SEN token.&nbsp;</p>
<p>According to <a href="https://twitter.com/CertiKAlert/status/1762871285036511328" target="_blank" rel="noopener noreferrer nofollow">CertiK</a>, the attacker initially exploited a vulnerability in the protocol to steal around $3 million worth of digital assets. The attacker transferred 1,000 ETH across two externally owned accounts (EOAs), escalating the estimated loss to approximately $6.4 million.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#CertiKSkynetAlert</a> 🚨<br><br>We are seeing an exploit on <a href="https://twitter.com/SenecaUSD?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@SenecaUSD</a> <br><br>Exploiter has stolen at least ~$3m worth of assets<br><br>All users should revoke the following addresses<br>0xbc83f2711d0749d7454e4a9d53d8594df0377c05<br>0x2d99e1116e73110b88c468189aa6af8bb4675ec9 <a href="https://t.co/iVhDhGwUc8" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/iVhDhGwUc8</a></p>— CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1762871285036511328?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">February 28, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>You might also like: <a href="https://crypto.news/coinbase-crash-bitcoin-zeroes/" rel="noopener noreferrer nofollow"> Coinbase crashes during Bitcoin rally as users see zeroes </a></p>
<p>The core of the vulnerability was in a function within the Seneca protocol’s smart contract code named ‘performOperations.’ This function, accessible to external calls, meaning anyone could trigger it, lacked proper validation for its received inputs.</p>
<p>The absence of input validation is a significant security oversight in smart contract development.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">We are actively working with security specialists to investigate the approval bug found today.<br><br>In the meantime, REVOKE approvals for the following addresses:<a href="https://twitter.com/hashtag/Ethereum?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#Ethereum</a><br>PT-ezETH 0x529eBB6D157dFE5AE2AA7199a6f9E0e9830E6Dc1<br>apxETH 0xD837321Fc7fabA9af2f37EFFA08d4973A9BaCe34…</p>— Seneca (@SenecaUSD) <a href="https://twitter.com/SenecaUSD/status/1762886130561630227?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">February 28, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The attacker developed a specific data sent to this function and triggered a condition that allowed the hacker to invoke any other contract on the blockchain with arbitrary data. This highly dangerous capability gives the attacker free rein to interact with other contracts disguised as vulnerable ones. The attacker then transferred assets from addresses previously authorized to the now-vulnerable contracts.&nbsp;</p>
<p>Seneca (SEN) operates as an omnichain Collateral Debt Position protocol for yield-bearing assets. Using supported collateral assets allows users to borrow the collateralized stablecoin, senUSD. The SEN token has various utilities, including governance, trading tax redistribution, and protocol fee redistribution through staking.&nbsp;</p>
<p>Read more: <a href="https://crypto.news/bitfinex-hacker-tactics-court/" rel="noopener noreferrer nofollow"> Bitfinex hacker turns government witness, explains tactics used in 2016 theft </a></p>

Seneca Protocol experiences $6m breach, SEN drops 65%

crypto.news

Other articles published on Feb 28, 2024

Cardano (ADA) & Ripple (XRP) feud sees rush to Kelexo (KLXO) presale pre Bitcoin (BTC) halving fo...

Bitcoin’s Surge: What’s Needed for Continued Growth?

Is the Personalized Web Experience the Future of Online Exploration?

Bitcoin Price Surge and Altcoin Market Update

Polygon and Chainlink ride on Algotech’s presale wave!

German VC Firm CEO Predicts Ripple’s XRP Will Become Global Currency

Join our free newsletter for daily crypto updates!