Tether USDt

Aave [old]

TrueUSD

USDC

BUSD

yearn.finance

Aave YFI

<p>As we forge into 2023, the <a href="https://blockchainreporter.net/defi/" rel="noopener noreferrer nofollow">decentralized finance (DeFi)</a> sector is facing a mounting crisis: a sharp increase in the number of hacks and exploits plaguing the industry. In a stunning turn of events, two prominent names in the DeFi market, Aave and Yearn Finance, have fallen victim to an audacious exploit, with over $10 million worth of <a href="https://blockchainreporter.net/tag/stablecoin/" rel="noopener noreferrer nofollow">stablecoins</a> siphoned off by nefarious actors. The crypto community is reeling from the shockwaves of this high-profile heist, which has cast a shadow over the previously untarnished reputations of these two DeFi giants.</p><h2 id="header-0">Aave V1 And Yearn Finance Rocked By $10 Million Exploit</h2><p>Decentralized finance (DeFi) protocols Aave V1 and <a href="https://yearn.finance/" rel="noopener noreferrer nofollow">Yearn Finance</a> have fallen prey to a major exploit, with early reports from security firms like PeckShield estimating the loss to be around $10 million. The perpetrators managed to snatch a mix of stablecoins, including DAI, USDC, BUSD, TUSD, and USDT, as revealed by LookOnChain.</p><p>As investigations continue, Aave Chan Initiative founder Marc Zeller’s recent tweets hint at the exploit being centered on Aave V1. Zeller stated, “Aave V1 has been frozen since Dec 2022, so no user can deposit or increase borrow size, making the issue unlikely but not impossible.” He further elaborated on the current size of Aave V1, which stands at $18 million, while the project boasts a safety module of $382.5 million that could potentially be utilized to compensate for the lost funds.</p><p>The DeFi community is now awaiting further details and the outcome of ongoing investigations. This latest exploit underscores the persistent security concerns that plague the rapidly growing DeFi sector, highlighting the urgent need for enhanced security measures and better safeguards to protect users’ investments.</p><h2 id="header-1">Yearn Finance’s yUSDT Has A Potential Flaw</h2><p>Marc Zeller confirmed that <a href="https://aave.com/" rel="noopener noreferrer nofollow">Aave</a> is actively researching the situation to unravel the specifics of the heist. Meanwhile, pseudonymous crypto researcher Samczsun has pointed to a potential flaw in Yearn Finance’s yUSDT token as a contributing factor.</p><p>Samczsun revealed that Yearn Finance’s yUSDT had been misconfigured since its deployment around three years ago, using the Fulcrum iUSDC token instead of the intended Fulcrum iUSDT token. This error may have played a role in the recent exploit, leaving the DeFi protocols vulnerable to malicious actors.</p><p>Peckshield recently said that the misconfigured yUSDT token lies at the heart of the breach. The error allowed malicious actors to leverage a relatively small $10,000 USDT investment to mint an enormous 1,252,660,242,212,927.5 yUSDT.</p><p>This massive amount of yUSDT was then quickly converted to other stablecoins through a series of swaps, resulting in substantial illicit gains for the attackers.</p>

DeFi Protocols Aave and Yearn Finance Suffer $10M Stablecoin Heist

目录

BlockchainReporter

发布于 2023年4月13日的其他文章

Crypto VC Funding Hits 2-year Low, US Firms Still: Galaxy Research

BYDFi x FEG AMA Recap (2023/04/13)

ApolloX V2 Brings More Transparent Perpetual Trading, Boosting Derivatives Ecosystem on BNB Chain

Amid Damaging Crypto Investment Scheme Shutdowns, TMS Network (TMSN) Shines Bright with $4.0 Mio ...

The Arbitrum WOM UP Party is here

Australia urged to move faster on crypto regulation

订阅我们免费的电子期刊，获取每日最新加密领域动态！