Ethereum

Arbitrum

2024

Impact

Security

<p>The post <a href="https://coinpedia.org/news/security-breach-hits-dolomite-exchange-nearly-1-8m-drained-from-exploited-contract/">Security Breach Hits Dolomite Exchange; Nearly $1.8M Drained from Exploited Contract</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>A contract dated back to 2019 with the Dolomite crypto exchange was compromised paving the way for the loss of $1.8 million i.e. 541 ETH from the exploited contract.&nbsp;</p> 
<p>As highlighted by the blockchain security company Peckshield Alerts, the tightly controlled contract previously applied at the Dolomite exchange served as the channel for the illegal transfer of about $1.8 million USDC. The exploiter swapped the stolen $USDC for 541.5 $ETH approximately $1.9m &amp; 94k $DAI tokens.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw">#PeckShieldAlert</a> Dolomite Exchange's old contracts were exploited for ~$2m. The exploiter has swapped the stolen <a href="https://twitter.com/search?q=%24USDC&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$USDC</a> for ~541.5 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$ETH</a> (~$1.9m) &amp; 94k <a href="https://twitter.com/search?q=%24DAI&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$DAI</a><a href="https://t.co/Oc0y6LNbEd">https://t.co/Oc0y6LNbEd</a> <a href="https://t.co/9qoPloDhiy">pic.twitter.com/9qoPloDhiy</a></p>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1770626638151389215?ref_src=twsrc%5Etfw">March 21, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>The attacker targeted the “callFunction” feature that offers calls to any code. Its “call” function lacked the “reentrancy guard” and through this vulnerability, the attacker could drain money from the affected users, a CertiK <a href="https://twitter.com/CertiKAlert/status/1770540518432289152">report</a> revealed.</p> 
<p>Users from this particular group were involved in approvals and hence hit by the bug. The development team immediately alerted the users to revoke the accesses addressed to the Ethereum Dolomite’s address, which has an initial 0xe2466.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">3/<br><br>With the above transaction submitted, all users who have NOT revoked approvals yet, *should* be safe.<br><br>However, we still encourage users to revoke approvals on the above contract.</p>— Dolomite 
   <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f3d4.png" alt="🏔" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@Dolomite_io) <a href="https://twitter.com/Dolomite_io/status/1770499043896016896?ref_src=twsrc%5Etfw">March 20, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-impact-and-mitigation-efforts"><strong>Impact and Mitigation Efforts</strong></h2> 
<p>As far as the users who communicated directly with the 1st version of the contract on Arbitrum remain unharmed, the developers disabled it without any delay to prevent other victims. Despite putting these precautions in place, the users are being reminded to revoke access that is related to the risk of the contract as well as to increase security.</p> 
<p>In 2022, Dolomite, an exchange and lending protocol built on Ethereum, decided to move to Arbitrum gradually ending support for Ethereum-based protocol. And because the smart contracts are irreversible, they were capable of managing the Ethereum version via competent tools.</p> 
<p>While the Dolomite team deals with the post effects of hacker exploit, users are strongly urged to revoke approvals from the affected contracts as said by the team and stay vigilant in their crypto endeavours.</p> 
<p>Also Read: <a href="https://coinpedia.org/news/us-lawmaker-highlights-ripple-ruling-a-game-changer-slams-sec-approach-over-crypto-industry/">US Lawmaker Highlights Ripple Ruling – A Game Changer, Slams SEC Approach Over Crypto Industry&nbsp;</a></p>

Security Breach Hits Dolomite Exchange; Nearly $1.8M Drained from Exploited Contract

Table of Contents

CoinPedia News

Other articles published on Mar 21, 2024

Solana: The Crypto Brand Compared to Apple

Did North Korea just send crypto to BlackRock via Tornado Cash?

Apple Stock Potentially Rallying on iPhone AI Updates, Analysts Suggest

Expert Recognizes Borroe Finance Presale For Unique Profit Opportunity Amid Market-Wide Speculati...

BlockDAG’s Mining Innovation: Daily Profits from $1 to $100 Surpassing Ethereum Staking Rewards a...

Ripple CTO David Schwartz Debuts Trading Bot Based on XRPL AMM

Join our free newsletter for daily crypto updates!