Astroport

2024

Terra

Cosmos

Terra blockchain was exploited on July 31, leading&nbsp;to a temporary halt in its operations. It has&nbsp;now restarted but concerns erupt from the vulnerability that was exploited. The attacker reportedly exploited a previously known flaw in the system, resulting in the theft of approximately 60 million ASTRO among other tokens.
Some early estimates believe the attack led to over $4 million in losses. Meanwhile, Terra said that an emergency patch was applied&nbsp;at block height 11430400.
<h2 id="span-data-preserver-spaces-true-terra-network-exploit-impacts-span-span-data-preserver-spaces-true-astro-span">Terra network exploit impacts ASTRO</h2>
On the morning of July 31, Terra blockchain <a class="editor-rtfLink" href="https://x.com/BeosinAlert/status/1818548029416411279" target="_blank" rel="noopener noreferrer nofollow">announced</a> that it was temporarily halting operations. It was revealed that the chain was attacked which led to the theft of around 60 million ASTRO, 3.5 million USDC, 500,000 USDT, and 2.7 BTC. Terra applied an emergency patch at block height 11430400. Reportedly, the attacker took advantage of a previous vulnerability in their system. Despite that, the Astroport protocol that is used for liquidity on the Cosmos network seems to be the biggest victim in the $4 million reported exploit.
ASTRO token dipped over 60% in value after the attack. At the time of writing, the price stands at $0.023 on CoinGecko, down 50%.
<figure id="attachment_562281" aria-describedby="caption-attachment-562281" style="width: 100%" class="wp-caption alignnone"><img fetchpriority="high" decoding="async" class="size-full wp-image-562281" src="https://www.cryptopolitan.com/wp-content/uploads/2024/07/chart-14.png" alt="ASTRO token dips | Source: CoinGecko" width="1644" height="1200" srcset="https://www.cryptopolitan.com/wp-content/uploads/2024/07/chart-14.png 1644w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/chart-14-300x219.png 300w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/chart-14-1200x876.png 1200w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/chart-14-768x561.png 768w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/chart-14-1536x1121.png 1536w" sizes="(max-width: 1644px) 100vw, 1644px">
 <figcaption id="caption-attachment-562281" class="wp-caption-text">
 ASTRO token dips | Source: CoinGecko
 </figcaption>
</figure>
As per Andres Monty, co-founder of Range security, the vulnerability was identified and fixed in the past. Monty suggests that IBC Rate Limits could have helped prevent the issue. Rate limits are known to control the speed and amount of transactions, which can potentially stop malicious activities.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Some quick thoughts on the Terra IBC Hooks exploit: 1. This exploits a known and previously patched vulnerability. 2. This is not the time to point fingers but to investigate the move of funds and aim to recover them. 3. IBC Rate Limits would have mitigated the issue!!!
 We're…
 — monty (@aesmonty) <a href="https://twitter.com/aesmonty/status/1818581882268701051?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">July 31, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
<h2 id="span-data-preserver-spaces-true-terra-blockchain-restarts-after-exploitation-span">Terra blockchain restarts after exploitation</h2>
The exploit is dubbed “reentrancy vulnerability” and was reportedly found in the timeout callback of IBC-hooks. Generally, the loophole can let hackers repeatedly call a function within the system before the previous function call is finished. The process enables attackers to manipulate the system and steal funds, a cyber flaw that was discussed in April.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 So yes, appears this is the IBC hooks exploit from back in April.<a href="https://t.co/GiozhuQ5n0" rel="noopener noreferrer nofollow" target="_blank">https://t.co/GiozhuQ5n0</a>
 Terra isn't patched, which allowed the exploit to occur.
 The exploiter could mint tokens that had been IBC transferred onto Terra by utilising a contract, IBC call (with IBC hooks), and a… <a href="https://t.co/iD4TIgTufX" rel="noopener noreferrer nofollow" target="_blank">https://t.co/iD4TIgTufX</a> <a href="https://t.co/fUgzInWKiv" rel="noopener noreferrer nofollow" target="_blank">pic.twitter.com/fUgzInWKiv</a>
 — Rarma (@Rarma_) <a href="https://twitter.com/Rarma_/status/1818489754373308907?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">July 31, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
&nbsp;
The vulnerability, <a class="editor-rtfLink" href="https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx" target="_blank" rel="noopener noreferrer nofollow">labeled</a> ASA-2024-007, affects several versions of the IBC-go software. The software is used in chains that support IBC (Inter-Blockchain Communication) and allows code uploads for smart contracts. Developers and maintainers often rush to update their systems to the latest patched versions of IBC-go to deal with similar attacks.
As per the official update, “Validators holding over 67% of the voting power on Terra have upgraded their nodes to prevent the exploit from recurring.”
At press time, Terra blockchain has restarted normal processes after the attack halted the chain for several hours. Terra has also confirmed that the emergency chain upgrade has concluded.

Terra blockchain restarts but crashes ASTRO token by 60%; Here’s what we know

Table of Contents

Cryptopolitan_News

Другие статьи, опубликованные 31 июл. 2024 г.

XRP Price Jumps As Ripple Leadership Blasts SEC’s ‘Hypocritical’ Crypto Regulation

Mt. Gox Transfers 45,511 Bitcoins to Repay Creditors, BTC Selloff Looms

Hong Kong Eyes Strategic Bitcoin Reserve

Harsh Criticism from WSJ to Donald Trump! "Contradicts the Spirit of Bitcoin!"

Solana's Network Growth Complicated by Bot Transaction Allegations

Spot Ethereum ETFs Record $34 Million Inflows On July 30

Join our free newsletter for daily crypto updates!