LeetSwap

WETH

<p class="is-style-lead">Decentralized exchange (DEX) LeetSwap, operating on Coinbase’s Base network, has temporarily halted trading due to concerns over a potential exploit.&nbsp;</p> 
<p>According to an Aug. 1 tweet from LeetSwap, the exchange detected suspicious activity in some of its liquidity pools and decided to pause trading immediately to conduct an investigation. The DEX is currently collaborating with renowned on-chain security experts to recover the locked liquidity.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
   <p lang="en" dir="ltr">As our DEX is forked from Solidly, our factory had a security pause function.<br><br>We noticed that some pool liquidity might have been compromised and we temporarily stopped the trading to investigate.</p>— LeetSwap (@LeetSwap) <a href="https://twitter.com/LeetSwap/status/1686190488506769408?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">August 1, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>While LeetSwap did not share specific details, blockchain analysts have shed some light on how the exploit might have occurred.</p> 
<p>According to Igor Igamberdiev, the head of research at algorithmic market maker Wintermute, the attacker likely utilized an exposed smart contract function to manipulate the price of a token. This manipulation would have enabled them to drain Wrapped Ethereum (WETH) from LeetSwap’s liquidity pools.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
   <p lang="en" dir="ltr">It was easy:<br><br>– swap a bit of WETH for X tokens (should have fees)<br>– call _transferFeesSupportingTaxTokens(address, uint256) to move token to a Fees contract<br>– call sync()<br>– swap X tokens for all WETH from the pool<br><br>Don't think that this function should be public<br><br>GG WP <a href="https://t.co/a7vXvWf0HY" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/a7vXvWf0HY</a></p>— Igor Igamberdiev (@FrankResearcher) <a href="https://twitter.com/FrankResearcher/status/1686201185273782272?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">August 1, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>The attack reportedly allowed the attacker to steal approximately 342.5 ETH, equivalent to over $630,000.</p> 
<p>Blockchain security firms, including <a href="https://twitter.com/peckshield/status/1686209024587710464" target="_blank" rel="noopener noreferrer nofollow">PeckShield</a>, BlockSec, and <a href="https://twitter.com/CertiKAlert/status/1686200262120144896" target="_blank" rel="noopener noreferrer nofollow">CertiK</a>, have confirmed Igamberdiev’s theory and the extent of the exploited funds in separate statements on social media.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
   <p lang="en" dir="ltr">Our analysis shows the root case is from the exposed LeetSwapV2Pair::_transferFeesSupportingTaxTokens() function, which is hardly forked from solidly. <a href="https://t.co/orupeZNt1B" target="_blank" rel="noopener noreferrer nofollow">https://t.co/orupeZNt1B</a> <a href="https://t.co/MSYskyhMXU" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/MSYskyhMXU</a></p>— PeckShield Inc. (@peckshield) <a href="https://twitter.com/peckshield/status/1686209024587710464?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">August 1, 2023</a> 
  </blockquote> 
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
<p>Approximately an hour and a half after the initial announcement, LeetSwap provided an <a href="https://twitter.com/LeetSwap/status/1686218273631686659" target="_blank" rel="noopener noreferrer nofollow">update</a>, assuring users that they are actively collaborating with security experts to find a viable solution to recover the locked liquidity.</p> 
<p>“If you did not lock your liquidity, you are free to remove it from the pools,” the decentralized exchange added.</p> 
<p> You might also like: <a href="https://crypto.news/sec-did-not-ask-coinbase-at-any-point-to-delist-assets-the-exchange-admits/" rel="noopener noreferrer nofollow"> SEC did not ask Coinbase ‘at any point’ to delist assets, the exchange admits </a> </p> 
<h2 class="wp-block-heading" id="strong-double-blow-on-leetswap-strong"><strong>Double blow on LeetSwap</strong></h2> 
<p>It has been a challenging day for Base’s leading DEX, LeetSwap, as this security concern comes on the heels of another setback. The popular meme coin, Bald, experienced a sharp drop in value after its developer withdrew a staggering 6,800 ETH (approximately $12.5 million) from the token’s liquidity pool on LeetSwap.</p> 
<p>At the time of writing, LEET, the native token of DEX LeetSwap, is trading at $14.92, having lost 18.4% in price over the last 24 hours, CoinGecko data shows.</p> 
<figure class="wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex"> 
 <figure class="wp-block-image size-large"> 
  <img decoding="async" width="1024" height="776" data-id="14182448" src="https://crypto.news/app/uploads/2023/08/Screen-Shot-2023-08-02-at-1.01.41-AM-1024x776.png" alt="Biggest Base DEX LeetSwap pauses trading amid exploit concerns - 1" class="wp-image-14182448"> 
 </figure> 
</figure> 
<p>Coinbase’s Base network, which opened its mainnet for developers on July 13, aims to provide faster and more cost-effective cryptocurrency transactions while maintaining the robust security features of the Ethereum blockchain.</p> 
<p> Read more: <a href="https://crypto.news/bald-meme-coin-surges-40000-in-48-hours-and-then-plunges/" rel="noopener noreferrer nofollow"> BALD meme coin surges 40,000% in 48 hours and then plunges </a> </p>

Biggest Base DEX LeetSwap pauses trading amid exploit concerns

Table of Contents

crypto.news

Autres articles publiés le 1 août 2023

Useless Fungible Objects: Alien cryptos invade after UFO hearing

FTX Proposes an Offshore Exchange for Non-US Users in its Reorganization Plan.

Sellers Failing to Sustain; MNMD Added 13.07% Intraday

Ethereum (ETH) Might Be Biggest Victim of Curve Attack, Here's How

Binance Releases CyberConnect on Its Launchpool, Enables Staking with FUSD, TUSD, and BNB

Ethereum's 8th birthday: Crypto industry shares its top moments

Join our free newsletter for daily crypto updates!