HomeCoinsEthereum (ETH)DeFi protocol BadgerDAO exploited for $120 million in front-end attack

DeFi protocol BadgerDAO exploited for $120 million in front-end attack

- Advertisement -


DeFi protocol BadgerDAO has fallen victim to a large hack. According to security researchers PeckShield, $120.3 million was stolen from users of the protocol.

BadgerDAO is a DeFi protocol focused on providing yield for bitcoin. The idea is that you bridge your bitcoin over onto a smart contract platform like Ethereum, as wrapped bitcoin, which you can then use within DeFi applications. BadgerDAO provides a variety of vaults where users can park their wrapped bitcoin and earn yields depending on the yield generation strategies used by the vaults.

Badger has received reports of unauthorized withdrawals of user funds. As Badger engineers investigate this, all smart contracts have been paused to prevent further withdrawals,” BadgerDAO tweeted today, confirming the exploit.

PeckShield documented the variety of assets stolen in the hack, which range from tokens like wrapped bitcoin (WBTC) and convex finance (CVX) to more complicated tokens like “ibbtc/sbtcCRV-f.” Many of the tokens represent assets held in a vault, meaning they can be redeemed for multiple tokens with varying values — making it harder to total the amount of funds stolen.

One user had around 900 bitcoin ($50.8 million) worth of tokens stolen in a single transaction. Another lost $5 million worth of tokens in one go.

The front end to the BadgerDAO website was reportedly acccessed, according to comments in the project’s Discord channel, and used to intercept transactions. One admin said it appears that an API key for Cloudflare was compromised.

While protocols like BadgerDAO are decentralized and can be interacted with directly, it requires specialized knowledge to do so. Most users will use a front end like the BadgerDAO website (although alternative front ends can be used). But this does have an element of risk: if the front end gets comprised, as in this case, then it can lead to loss of funds.

For more breaking stories like this, make sure to follow The Block on Twitter.

© 2021 The Block Crypto, Inc. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.





Source link

- Advertisement -
Mr Bitcointehttps://www.bitcointe.com/
“Fact You Need To Know About Cryptocurrency - The first Bitcoin purchase was for pizza.” ― Mohsin Jameel
462FansLike
76FollowersFollow
4,567FollowersFollow
5,261FollowersFollow
1,560FollowersFollow
2,230SubscribersSubscribe

Most Popular

bitcoin
Bitcoin (BTC) $ 43,142.00
ethereum
Ethereum (ETH) $ 3,324.47
tether
Tether (USDT) $ 1.00
bitcoin-cash
Bitcoin Cash (BCH) $ 387.44
litecoin
Litecoin (LTC) $ 145.78
eos
EOS (EOS) $ 2.90
okb
OKB (OKB) $ 26.02
tezos
Tezos (XTZ) $ 4.30
leo-token
LEO Token (LEO) $ 3.75
cardano
Cardano (ADA) $ 1.36
monero
Monero (XMR) $ 214.24
stellar
Stellar (XLM) $ 0.261743
chainlink
Chainlink (LINK) $ 25.77
huobi-token
Huobi Token (HT) $ 10.01
tron
TRON (TRX) $ 0.07008
usd-coin
USD Coin (USDC) $ 1.00
dash
Dash (DASH) $ 139.46
neo
NEO (NEO) $ 25.33
iota
IOTA (MIOTA) $ 1.14
nem
NEM (XEM) $ 0.118963
zcash
Zcash (ZEC) $ 143.50
maker
Maker (MKR) $ 2,205.41
paxos-standard
Pax Dollar (USDP) $ 1.00
ethereum-classic
Ethereum Classic (ETC) $ 32.52
vechain
VeChain (VET) $ 0.078845
true-usd
TrueUSD (TUSD) $ 1.00
ftx-token
FTX Token (FTT) $ 46.22
kucoin-shares
KuCoin Token (KCS) $ 20.58
waves
Waves (WAVES) $ 14.60