$800K lost following Sturdy Finance security breach

$800K lost following Sturdy Finance security breach
фото показано с : invezz.com

2023-6-12 11:59

Decentralized lending platform Sturdy Finance suffered a serious security breach earlier today that cost it 442 Ethereum (ETH), worth about $800,000. An unidentified hacker launched the attack, taking advantage of the system’s reentrancy vulnerability to control a flawed price oracle and steal money.

Essentially, price oracles play a crucial role in decentralized finance (DeFi) applications like Sturdy Finance by providing actual price data. However, they can also be a top target for hackers looking to take advantage of flaws and jeopardize the platform’s security.

How the Study Finance attack was orchestrated

Reentrancy attacks, which are frequently used to fraudulently withdraw money from DeFi protocols, were used to launch the attack on Sturdy Finance. This kind of attack makes use of the capability to make multiple calls to the same function within a single transaction before the initial function call has finished. The attacker was able to withdraw more money than they were legally allowed to by taking advantage of this flaw.

The attacker then used their control over the function calls to take advantage of the price oracle. Sturdy Finance derived its price oracle from a separate “read-only” smart contract, which was in charge of accurately estimating the market value of assets in a liquidity pool run by the Balancer protocol. The attacker, however, was successful in manipulating the oracle, allowing them to steal funds from Study Finance.

Security Company BlockSec identified the root cause of the breach as the typical reentrancy vulnerability in Balancer’s system, combined with the manipulation of the price of B-stETH-STABLE.

According to on-chain data, the attacker then went ahead to use the embattled Tornado Cash mixer to obfuscate their activities.

Sturdy Finance responded to the attack right away by suspending all of its markets in order to limit potential losses. Users received assurances from the team that no additional funds were in danger and that no immediate action was needed on their part. They promised to share more details as soon as they were made available.

The post $800K lost following Sturdy Finance security breach appeared first on Invezz.

origin »

Bitcoin price in Telegram @btc_price_every_hour

SherLOCK Security (LOCK) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 6.06 %, 7d: -9.29 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Цена в час новости $ 0.1387 (-100%)

security finance breach sturdy system advantage attack

Источник: invezz.com

security finance → Результатов: 126


Interview with KwikTrust Executives on the Future of E-validation, NFTs and How KwikTrust is Uniquely Positioned to Capitalize

KwikTrust is a next-generation e-validation platform that provides more secure file validation and management than ever possible before.   The platform is also home to the SuperNFT, enabling a unique class of NFTs that raise the bar for security, identity, provenance and ultimately trust, opening the door for new asset classes across finance, deeds of ownership, and intellectual property.

2022-1-17 12:47


Фото:

US Crypto Regulation: Report Says Biden Likely To Deploy Executive Orders Soon

The US Cryptocurrency industry is about to become the target of Biden’s 65th executive order since becoming president in January, a recently released report by Bloomberg suggests. The order, which is aimed at commissioning federal security and finance agencies to commence investigation into the crypto industry with a view to reporting their findings, is the […]

2021-10-12 14:51


Фото:

Linear Finance upgrades oracle mechanism to Chainlink Price Feeds

Following the successful upgrade of Linear Finance’s oracle mechanism to Chainlink (LINK/USD) Price Feeds, users of the protocol will enjoy improved reliability and security guarantees that all LINA synthetic assets will be redeemed, swapped, minted, and liquidated according to the latest, most precise world market prices, Invezz learned from a press release.

2021-9-23 16:01


Фото:

Is it worth investing in Polkadex before the Mainnet Launch on September 29?

Polkadex PDEX/USD is a fully decentralized peer-to-peer order book-based cryptocurrency exchange for the decentralized finance (DeFi) ecosystem.   It is known for providing a high level of security, lightning-fast speed, advanced features such as high-frequency trading and trading bots, zero gas fees, and decentralized KYC.

2021-9-23 15:16


дальше еще 77 новостей →

Партнеры Currencies.ru



Реклама на Currencies.ru

Самое свежее на Currencies.ru