Tether USDt

Aave [old]

TrueUSD

USDC

BUSD

yearn.finance

Aave YFI

<p>As we forge into 2023, the <a href="https://blockchainreporter.net/defi/" rel="noopener noreferrer nofollow">decentralized finance (DeFi)</a> sector is facing a mounting crisis: a sharp increase in the number of hacks and exploits plaguing the industry. In a stunning turn of events, two prominent names in the DeFi market, Aave and Yearn Finance, have fallen victim to an audacious exploit, with over $10 million worth of <a href="https://blockchainreporter.net/tag/stablecoin/" rel="noopener noreferrer nofollow">stablecoins</a> siphoned off by nefarious actors. The crypto community is reeling from the shockwaves of this high-profile heist, which has cast a shadow over the previously untarnished reputations of these two DeFi giants.</p><h2 id="header-0">Aave V1 And Yearn Finance Rocked By $10 Million Exploit</h2><p>Decentralized finance (DeFi) protocols Aave V1 and <a href="https://yearn.finance/" rel="noopener noreferrer nofollow">Yearn Finance</a> have fallen prey to a major exploit, with early reports from security firms like PeckShield estimating the loss to be around $10 million. The perpetrators managed to snatch a mix of stablecoins, including DAI, USDC, BUSD, TUSD, and USDT, as revealed by LookOnChain.</p><p>As investigations continue, Aave Chan Initiative founder Marc Zeller’s recent tweets hint at the exploit being centered on Aave V1. Zeller stated, “Aave V1 has been frozen since Dec 2022, so no user can deposit or increase borrow size, making the issue unlikely but not impossible.” He further elaborated on the current size of Aave V1, which stands at $18 million, while the project boasts a safety module of $382.5 million that could potentially be utilized to compensate for the lost funds.</p><p>The DeFi community is now awaiting further details and the outcome of ongoing investigations. This latest exploit underscores the persistent security concerns that plague the rapidly growing DeFi sector, highlighting the urgent need for enhanced security measures and better safeguards to protect users’ investments.</p><h2 id="header-1">Yearn Finance’s yUSDT Has A Potential Flaw</h2><p>Marc Zeller confirmed that <a href="https://aave.com/" rel="noopener noreferrer nofollow">Aave</a> is actively researching the situation to unravel the specifics of the heist. Meanwhile, pseudonymous crypto researcher Samczsun has pointed to a potential flaw in Yearn Finance’s yUSDT token as a contributing factor.</p><p>Samczsun revealed that Yearn Finance’s yUSDT had been misconfigured since its deployment around three years ago, using the Fulcrum iUSDC token instead of the intended Fulcrum iUSDT token. This error may have played a role in the recent exploit, leaving the DeFi protocols vulnerable to malicious actors.</p><p>Peckshield recently said that the misconfigured yUSDT token lies at the heart of the breach. The error allowed malicious actors to leverage a relatively small $10,000 USDT investment to mint an enormous 1,252,660,242,212,927.5 yUSDT.</p><p>This massive amount of yUSDT was then quickly converted to other stablecoins through a series of swaps, resulting in substantial illicit gains for the attackers.</p>

DeFi Protocols Aave and Yearn Finance Suffer $10M Stablecoin Heist

目次

BlockchainReporter

2023年4月13日公開の他の記事

Europe grapples with AI policy at latest data protection meeting

Ripple Signs Central Bank Digital Currency (CBDC) Deal With Montenegro – Is XRP Involved?

Sei Labs Secures $30M in Funding to Drive Asia Expansion

Crypto Analyst Cautions Investors Amid FTX Reopening Speculation

Bobsolar opening its door in Gent (Belgium)

Coinbase Delivering Massive XRP-Related Airdrop to Crypto Holders – Here’s How To Know if You Qua...

ニュースレターを購読して暗号資産の最新情報を毎日入手！