WETH

Uniswap

<p class="is-style-lead">The arbitrage bot was hacked and lost about $2 million in one of the pools of the Curve Finance platform.</p> 
<p>This was first reported by a user under the pseudonym Spreek. He suggested that the hack occurred due to the 0xf6ebebbb() function.</p> 
<p>This was confirmed by Beosin. According to them, the attacker took advantage of the fact that it was available without authorization to force a swap between pools.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">🚨An unknown MEV bot was hacked for ~$2M. <a href="https://t.co/HC2QYEfGZ7" target="_blank">https://t.co/HC2QYEfGZ7</a><br><br>The root cause was that the arbitrage function 0xf6ebebbb() did not have authentication, allowing the attacker to call 0xf6ebebbb() to force swaps across multiple <a href="https://t.co/m0tYfbwWqY" target="_blank">https://t.co/m0tYfbwWqY</a> pools, resulting in high… <a href="https://t.co/2Xah6j57ed" target="_blank">pic.twitter.com/2Xah6j57ed</a></p>— Beosin Alert (@BeosinAlert) <a href="https://twitter.com/BeosinAlert/status/1722065682677072126?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">November 8, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>He then issued an instant loan for 27,255 WETH (more than $51 million), changed the price balance in the WETH/WBTC pool, and conducted an arbitrage transaction through a bot.</p> 
<p>The hacker exchanged 1339.8 WETH for 6.95 WBTC at the new rate. He then repaid the loan. The damage from his operations reached about $2 million.</p> 
<p>Previously, an unknown liquidity provider <a href="https://crypto.news/uniswap-user-lost-700k-after-amid-liquidity-pool-error/">lost</a> more than $700,000 due to the actions of the MEV bot. User (0x568) created a WBTC-CRV liquidity pool on the Uniswap v3 platform. He then deposited $1.56 million worth of wrapped bitcoins into it.&nbsp;When setting up, he mixed up the CRV rate. The user set $1 instead of $0.5.</p> 
<p> You might also like: <a href="https://crypto.news/anonymous-mev-bot-operator-refunds-70k-in-eth-from-curve-finance-attack/"> Anonymous MEV bot operator refunds $70k in ETH from Curve Finance attack </a> </p>

MEV bot in Curve Finance pool lost $2m following hack

crypto.news

发布于 2023年11月8日的其他文章

Cardano Dominates Crypto Development: ADA Price Reacts

What is a Token Generation Event (TGE)? How Token Generation Event Fully Works

Ripple, Onafriq partner for new payment corridors for Africa, UK, Australia and Gulf

BIS researchers believe that stablecoins will not live up to hype

Devon Price Prediction 2023-2025: Can DVN Price Give 150% Growth?

Crypto Analyst Makes Stark Warning About Crypto Market Correction

订阅我们免费的电子期刊，获取每日最新加密领域动态！