Terra

USDC

Security

Cosmos

<p>The Terra blockchain faced a severe security exploit of approx. $6 million due to a vulnerability in the IBC hooks module, allowing an attacker to drain substantial assets. However, block production resumed at 4:19 AM UTC today after a critical emergency upgrade, with over 67% of validators updating their nodes.</p> 
<p>The exploit targeted bridged assets, including the USDC stablecoin and ASTRO tokens from Astroport Finance. Security firm Beosin <a href="https://x.com/BeosinAlert/status/1818548029416411279" target="_blank" rel="noreferrer noopener nofollow">estimates</a> that over $6 million in tokens were stolen, leading to a 60% drop in ASTRO’s value.&nbsp;</p> 
<div class="wp-block-image"> 
 <figure class="aligncenter">
  <img decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeiAgTGHIQXbEt0gZpihJhXebVHQclelLC7crmBv42UpLere15DRl9tGbrLZdOz2Q_PL2z7g-BWzVKoADfOBM5nohukMu004fSmyuEr9uWWx9tdD5Pg5xPG7gCPicxtu88F8g0JxLUQliHe8HCu98o-tQrz?key=niJao2hZg4exqdfmaobRgg" alt="AD 4nXeiAgTGHIQXbEt0gZpihJhXebVHQclelLC7crmBv42UpLere15DRl9tGbrLZdOz2Q PL2z7g BWzVKoADfOBM5nohukMu004fSmyuEr9uWWx9tdD5Pg5xPG7gCPicxtu88F8g0JxLUQliHe8HCu98o">
  <figcaption class="wp-element-caption">
   Image Source: Terra
  </figcaption>
 </figure>
</div> 
<p>This vulnerability had been previously patched across the broader Cosmos ecosystem in April 2024 but was overlooked in Terra’s June upgrade, leaving the network exposed.</p> 
<p>The breach <a href="https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx" target="_blank" rel="noreferrer noopener nofollow">allowed</a> attackers to execute malicious CosmWasm contracts through IBC interactions, resulting in the re-minting of assets. Specifically, attackers drained 3.5 million USDC, 500k USDT, 2.7 BTC, and 60 million ASTRO tokens.&nbsp;</p> 
<p>The compromised tokens were minted into the attacker’s wallet and transferred out before being “burnt” upon exit. This manipulation inflated the total value locked (TVL) figures on Terra, reflecting assets that no longer exist.</p> 
<div class="wp-block-image"> 
 <figure class="aligncenter">
  <img decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdr6j-_iriTXHKvXqoo0DTcVnKA6hY7tJaraY6EeQamER4U1gp4Z2x8cOoHVAldc3rf9WE9hkM9lGhYNdSMCjKUHn1Hpd1nTAhH_K6TVb80MIFcMPrR1Z5ZBblzvu_vtnIxA5D8QA0G_F4Yfq9dWezZVrw?key=niJao2hZg4exqdfmaobRgg" alt="AD 4nXdr6j">
  <figcaption class="wp-element-caption">
   Image Source: CyversAlerts
  </figcaption>
 </figure>
</div> 
<p>Terra blockchain paused operations at block 11,430,400, halting all user transactions. The team, in collaboration with Terra (Phoenix-1) validators, implemented an emergency patch to address a suspected exploit during this downtime, according to their official X post.</p> 
<p>In response, Terra swiftly implemented emergency measures, coordinating with validators to apply an urgent patch to address the exploit. The incident underscores a critical need for robust security measures in blockchain infrastructure to prevent such vulnerabilities.</p> 
<p>As the digital asset world grapples with these revelations, the spotlight is on Terra to strengthen its security protocols and restore confidence in its network. This breach highlights the ongoing challenges in securing blockchain systems and the necessity for continuous vigilance and upgrades.</p> 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 <p>Also Read: <a href="https://www.cryptotimes.io/2024/07/31/indias-bwa-to-address-cyber-consumer-woes-post-wazirx-hack/" target="_blank" rel="noreferrer noopener">India’s BWA to Address Cyber, Consumer Woes Post-WazirX Hack</a></p> 
</blockquote>

Terra Resumes Block Production After $6M Security Breach

The Crypto Times

发布于 2024年7月31日的其他文章

BTC to ETH. How to Convert Bitcoin to Ethereum Avoiding KYC?

Bitcoin slides below $66k: Here’s what whales are up to

Bitsofa: Revolutionizing Cryptocurrency Trading and P2P

Trump Sells Limited “Crypto President” Bitcoin Sneakers

Solana Remains on the Security Status Hook Despite SEC's Court Move

E Money Network launches $2 MILLION RWA Grant Program to spearhead RWA ecosystem

订阅我们免费的电子期刊，获取每日最新加密领域动态！