2024

Shield Token

Seneca

Serenity Shield

Axie Infinity

<a href="https://bitcoinworld.co.in/decentralized-lending-platform-seneca-has-been-hacked-6-4m-exploited/" title="Decentralized Lending Platform Seneca Has Been Hacked, $6.4M Exploited" rel="nofollow"></a>
The Seneca lending protocol was hacked through its ‘performOperations’ function, and about $6.4M of collateral was drained from it. 
Decentralized finance (DeFi) lending platform and stablecoin issuer Seneca Protocol has been exploited, according to a Feb. 28 statement on the protcol’s official <a href="https://twitter.com/SenecaUSD/status/1762886130561630227">X</a> account.&nbsp; 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 We are actively working with security specialists to investigate the approval bug found today. 
 In the meantime, REVOKE approvals for the following addresses:<a href="https://twitter.com/hashtag/Ethereum?src=hash&amp;ref_src=twsrc%5Etfw">#Ethereum</a> PT-ezETH 0x529eBB6D157dFE5AE2AA7199a6f9E0e9830E6Dc1 apxETH 0xD837321Fc7fabA9af2f37EFFA08d4973A9BaCe34… 
 — Seneca (@SenecaUSD) <a href="https://twitter.com/SenecaUSD/status/1762886130561630227?ref_src=twsrc%5Etfw">February 28, 2024</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
In a report seen by Cointelegraph, blockchain analytics firm CertiK estimated the losses at $6.4 million so far.&nbsp; 
The Seneca team urged users to revoke approvals for the affected contracts. Its staff are “currently working with security specialists to investigate the bug,” they stated. 
Seneca Protocol is a DeFi lending app that allows users to deposit a variety of cryptocurrencies as collateral, which then can be used to mint and borrow the protocol’s native stablecoin, SenecaUSD. 
See Also: <a class="row-title" href="https://bitcoinworld.co.in/serenity-shield-token-sersh-collapsed-by-95-after-5-6m-breach/" aria-label="“Serenity Shield Token (SERSH) Collapsed By 95% After $5.6m Breach” (Edit)">Serenity Shield Token (SERSH) Collapsed By 95% After $5.6m Breach</a> 
Blockchain data shows that an account ending in 42DC was able to transfer approximately 1,385.23 Pendleton Kelp restaked Ether (PT Kelp rsETH) from a Seneca collateral pool, which it did by calling the “performOperations” function.&nbsp; 
The account subsequently swapped these tokens for approximately $4 million worth of Ether (ETH) over the course of three transactions.&nbsp; 
After these swaps, the account transferred an additional 717.04 ETH derivative tokens from various collateral pools and swapped them for ETH. 
In its report, CertiK claimed that these transfers were malicious. They were made possible because the protocol contains a flaw in its “performOperations” function, the report stated.&nbsp; 
The bug allows any account to call the function while specifying OPERATION_CALL as the action to be performed.&nbsp; 
This allows the attacker to “perform external calls to any address as the callee and callData are fully controlled by the attacker.”&nbsp; 
As a result, the attacker was able to drain funds from the collateral pool that it didn’t own, CertiK claims. 
Blockchain investigator Spreek also <a href="https://twitter.com/spreekaway/status/1762857769714012217">warned</a> users about the exploit on X, stating that it represented a “critical vulnerability.”&nbsp; 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 Looks like Seneca Protocol has a critical approval exploit (open external call). $3m+ lost so far across eth/arb <a href="https://t.co/MkbNShtPUm">pic.twitter.com/MkbNShtPUm</a> 
 — Spreek (Denver 28th-5th) (@spreekaway) <a href="https://twitter.com/spreekaway/status/1762857769714012217?ref_src=twsrc%5Etfw">February 28, 2024</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
Spreek suggested that users should revoke approvals of the addresses used in the exploit. 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 ADDRESSES TO REVOKE: 0xbc83f2711d0749d7454e4a9d53d8594df0377c05 (MAINNET) 
 0x2d99e1116e73110b88c468189aa6af8bb4675ec9 (ARBITRUM) 
 — Spreek (Denver 28th-5th) (@spreekaway) <a href="https://twitter.com/spreekaway/status/1762857944721363331?ref_src=twsrc%5Etfw">February 28, 2024</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
According to security researcher ddimitrov22, Seneca is suffering from an additional vulnerability that prevents developers from pausing the Seneca contracts, as the pause and unpause functions in them contain the keyword “internal,” which means “there is no way to call them.” 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 The Seneca protocol is hacked and it cannot be paused even though it inherits the Pausable library. 
 This is because the `_pause` and `_unpause` functions are internal and there is no way to call them. <a href="https://t.co/en0qIsayMX">pic.twitter.com/en0qIsayMX</a> 
 — ddimitrov22 (@ddimitrovv22) <a href="https://twitter.com/ddimitrovv22/status/1762886306420379864?ref_src=twsrc%5Etfw">February 28, 2024</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
In its post acknowledging the attack, the development team stated that they are conducting an investigation and will post an update “shortly.” 
Hacks and exploits continue to threaten Web3 users in 2024. On Feb, 23, Axie Infinity co-founder Jeff “Jihoz” Zirlin lost $9.7 million from a hack of his personal wallets.&nbsp; 
On the same day, DeFi protocol Blueberry was exploited for 457 ETH. 
<blockquote>
 Disclaimer: The information provided is not trading advice. Bitcoinworld.co.in holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.
</blockquote> 
#Binance #WRITE2EARN 
The post <a href="https://bitcoinworld.co.in/decentralized-lending-platform-seneca-has-been-hacked-6-4m-exploited/">Decentralized Lending Platform Seneca Has Been Hacked, $6.4M Exploited</a> appeared first on <a href="https://bitcoinworld.co.in">BitcoinWorld</a>.

Decentralized Lending Platform Seneca Has Been Hacked, $6.4M Exploited

ItsBitcoinWorld

Other articles published on Mar 2, 2024

Elon Musk’s Lawyers Request $6 Billion in Tesla Shares as Legal Fees

Bitcoin (BTC) & Solana (SOL) Both Gain 10% in 24 Hours, Kelexo (KLXO) Secures Major USD Coin (USD...

5 Best Cryptos For Beginners in 2024

Elon Musk Sues OpenAI and Sam Altman, Impacting Worldcoin (WLD) Prices

Ethereum (ETH) New 2024 Highs Sees Investors Join Kelexo (KLXO) Leverage & Loaning Sensation as P...

Weekly Crypto Report: Top News, Blockchain Activity, Bitcoin and Altcoin Price Analysis and More

Join our free newsletter for daily crypto updates!