DeFi

Hundred Finance

Sonne Finance

Million

Optimism

<p>The post <a href="https://coinpedia.org/news/defi-project-sonne-finance-exploited-for-20-million-on-optimism/">DeFi Project Sonne Finance Exploited for $20 Million on Optimism</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>A series of hacks has occurred. The latest victim was Sonne Finance, a decentralised lending protocol that works on Optimism and Base. The protocol has been hacked for at least $20 million. The attack planned through a vulnerability typical of the Compound Finance forks, has created a storm in the DeFi community.</p> 
<p>Sonne Finance immediately closed all markets on the Optimism platform in reaction to the hack and made sure that the funds on Base were safe from the attack.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">All markets on Optimism have been paused. <br><br>Markets on Base are safe. <br><br>We'll provide more information with time.</p>— Sonne Finance (@SonneFinance) <a href="https://twitter.com/SonneFinance/status/1790535383005966554?ref_src=twsrc%5Etfw">May 15, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-details-of-the-exploit"><strong>Details of the Exploit</strong></h2> 
<p>PeckShield, a blockchain security firm, says Sonne Finance was attacked by a hacker who used a known vulnerability in the forks of Compound Finance. This glitch enabled the attacker to withdraw about $20 million from Sonne Finance’s smart contracts on the Optimism network.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Hi <a href="https://twitter.com/SonneFinance?ref_src=twsrc%5Etfw">@SonneFinance</a>: Please double check your timelock contract and the loss is now more than $20m.</p>— PeckShield Inc. (@peckshield) <a href="https://twitter.com/peckshield/status/1790533115636781557?ref_src=twsrc%5Etfw">May 15, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-understanding-the-exploitation-technique"><strong>Understanding the Exploitation Technique</strong></h2> 
<p>Sonne Finance, the derivative of Compound V2, was linked to certain weaknesses which were inherited from its codebase. Hundred Finance and Midas Capital were the victims of DeFi hacks last year and the same vulnerabilities have been used in the previous DeFi hacks.&nbsp;</p> 
<p>In these attacks, the malicious actors manipulate the exchange rates to increase the collateral values artificially so that they drain the pools of lending with few tokens.</p> 
<p>The Sonne Finance exploit was possible due to the implementation of a new market contract for VELO and a later governance proposal to activate it. Once the proposal was passed, the attacker smartly executed the contract right after the completion of the 24-hour timelock, hence, he was the first one to benefit from the exploit.</p> 
<h2 class="wp-block-heading" id="h-response-and-recovery-efforts"><strong>Response and Recovery Efforts</strong></h2> 
<p>After the exploit, Sonne Finance took the necessary step of stopping all the Optimism markets to limit the damage. The Base market remained safe and stable.&nbsp;</p> 
<p>In their post-mortem of the incident, Sonne Finance put out a list of wallet addresses that belonged to the manipulator in an attempt to find the culprit. The team stressed their continuous efforts to retrieve the stolen funds, including offering a bug bounty, tapping into the support of the whole crypto community, and engaging with the relevant stakeholders.</p> 
<p>There are many versions of Compound V2 already in circulation; hence, security protocols should be the priority, which includes regular audits and timely vulnerability patches.</p>

DeFi Project Sonne Finance Exploited for $20 Million on Optimism

Table of Contents

CoinPedia News

Other articles published on May 15, 2024

BlackRock, Fidelity, Bitwise Bitcoin ETF Grab $205M From New York RIA

Is It Too Late To Buy GME? GameStop Price Pumps Another 51% And This Might Be The Next Crypto To ...

New Cryptocurrency Releases, Listings, & Presales Today – VolumeX, Gamia, Dogeverse

Robinhood Crypto Launches Solana Staking In EU

OpenAI Announces Leadership Change as Ilya Sutskever Departs

Humanity Protocol Achieves Unicorn Status After New Funding Round

Join our free newsletter for daily crypto updates!