Ads ad-300x250
  • Latest
  • Trending
Thorchain loose (again) 8 million in cryptocurrencies

Thorchain loose (again) 8 million in cryptocurrencies

August 2, 2021
How do Web3 and NFTs enrich the live music experience?

How do Web3 and NFTs enrich the live music experience?

January 23, 2023
Paxos offers $1.5 billion deal to MakerDAO for DAI collateralization

Paxos offers $1.5 billion deal to MakerDAO for DAI collateralization

January 23, 2023
SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

December 30, 2022
The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

December 22, 2022
What is flipping in crypto?

What is flipping in crypto?

December 18, 2022
BlackRock predicts an unprecedented recession in 2023

BlackRock predicts an unprecedented recession in 2023

December 10, 2022
Waltio outlines strategy to reduce its taxation on cryptocurrencies

Waltio outlines strategy to reduce its taxation on cryptocurrencies

December 1, 2022
BlockFi files for bankruptcy after FTX collapse

BlockFi files for bankruptcy after FTX collapse

November 29, 2022
Solana’s Phantom wallet opens to Ethereum and Polygon

Solana’s Phantom wallet opens to Ethereum and Polygon

November 29, 2022
Vladimir Putin predicts a blockchain-based international payment system

Vladimir Putin predicts a blockchain-based international payment system

November 28, 2022
The Shiba Inu (SHIB) soon at the World Economic Forum?

The Shiba Inu (SHIB) soon at the World Economic Forum?

November 26, 2022
Cloud mining fraud: founders of $575 million scam arrested

Cloud mining fraud: founders of $575 million scam arrested

November 23, 2022
CoinsMag
SignIn / SignUp
  • HOME
  • NEWS
    SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

    SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

    The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

    The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

    Waltio outlines strategy to reduce its taxation on cryptocurrencies

    Waltio outlines strategy to reduce its taxation on cryptocurrencies

    BlockFi files for bankruptcy after FTX collapse

    BlockFi files for bankruptcy after FTX collapse

    Solana’s Phantom wallet opens to Ethereum and Polygon

    Solana’s Phantom wallet opens to Ethereum and Polygon

    Vladimir Putin predicts a blockchain-based international payment system

    Vladimir Putin predicts a blockchain-based international payment system

  • BLOCKCHAINS
    • All
    • Algorand
    • Avalanche
    • Bitcoin
    • BNB Chain
    • Cardano
    • Cosmos
    • Dogecoin
    • Elrond
    • Ethereum
    • Monero
    • Polkadot
    • Polygon
    • Ripple
    • Shiba Inu
    • Solana
    • Stellar
    • Ternoa
    • Terra
    • Tezos
    • Tron
    How do Web3 and NFTs enrich the live music experience?

    How do Web3 and NFTs enrich the live music experience?

    SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

    SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

    The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

    The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

    What is flipping in crypto?

    What is flipping in crypto?

    Waltio outlines strategy to reduce its taxation on cryptocurrencies

    Waltio outlines strategy to reduce its taxation on cryptocurrencies

  • DEFI
    Paxos offers $1.5 billion deal to MakerDAO for DAI collateralization

    Paxos offers $1.5 billion deal to MakerDAO for DAI collateralization

    BlackRock predicts an unprecedented recession in 2023

    BlackRock predicts an unprecedented recession in 2023

    Free crypto / referral codes

    This (other) billionaire, who prefers Dogecoin to Bitcoin

    This (other) billionaire, who prefers Dogecoin to Bitcoin

    Google and the king of crypto oracles Chainlink (LINK) unveil their joint project

    Google and the king of crypto oracles Chainlink (LINK) unveil their joint project

    The Bitcoin (BTC) hashrate is on the rise again

    The Bitcoin (BTC) hashrate is on the rise again

    Burger King accepts Dogecoin (DOGE) in Brazil… for dog food

    Burger King accepts Dogecoin (DOGE) in Brazil… for dog food

    791 bitcoins bought for $5 9 years ago have finally come to life

    791 bitcoins bought for $5 9 years ago have finally come to life

    Binance: the rise of the BUSD impresses

    Binance: the rise of the BUSD impresses

  • NFT
    How do Web3 and NFTs enrich the live music experience?

    How do Web3 and NFTs enrich the live music experience?

    Is Apple planning to release a movie about Sam Bankman-Fried and the FTX case?

    Is Apple planning to release a movie about Sam Bankman-Fried and the FTX case?

    In the United States, a house in NFT has just been sold for $175,000

    In the United States, a house in NFT has just been sold for $175,000

    CNN is accused of rug pull by the community after its NFT project was stopped

    CNN is accused of rug pull by the community after its NFT project was stopped

    The OpenSea marketplace lands on Avalanche (AVAX)

    The OpenSea marketplace lands on Avalanche (AVAX)

    Japan sees the future in nft and metaverse

    Japan sees the future in nft and metaverse

  • GAMES
    Square Enix partners with Oasys to develop blockchain games

    Square Enix partners with Oasys to develop blockchain games

    Epic Games gets a head start on its Steam competitor

    Epic Games gets a head start on its Steam competitor

    Do you have to be a bot to enjoy web 3 (bad) games?

    Do you have to be a bot to enjoy web 3 (bad) games?

    StepN partners with Atletico and WhaleFin for a collection of exclusive NFTs

    StepN partners with Atletico and WhaleFin for a collection of exclusive NFTs

    Crypto Gaming, an industry revolution this year?

    Crypto Gaming, an industry revolution this year?

  • METAVERSE
    Solana’s Phantom wallet opens to Ethereum and Polygon

    Solana’s Phantom wallet opens to Ethereum and Polygon

    Is Apple planning to release a movie about Sam Bankman-Fried and the FTX case?

    Is Apple planning to release a movie about Sam Bankman-Fried and the FTX case?

    World Cup in Qatar: FIFA plunges into the mawkishness

    World Cup in Qatar: FIFA plunges into the mawkishness

    The United Arab Emirates: a first “meta-nation”?

    The United Arab Emirates: a first “meta-nation”?

    At Meta, employees are forced to log into the Horizon Worlds metaverse

    At Meta, employees are forced to log into the Horizon Worlds metaverse

    No, Decentraland does not have only 38 daily active users

    No, Decentraland does not have only 38 daily active users

    Japan sees the future in nft and metaverse

    Japan sees the future in nft and metaverse

    Yuga Labs unveils its new community board in charge of the project’s evolution

    Yuga Labs unveils its new community board in charge of the project’s evolution

  • FREE CRYPTOS
  • TUTORIALS
    Buy a Ledger wallet on Amazon – Is it really secure?

    Buy a Ledger wallet on Amazon – Is it really secure?

    Odysee | EARN Lbry Credits (LBC) watching videos

    Odysee | EARN Lbry Credits (LBC) watching videos

    Web 3.0: better infrastructure needed to stop centralization

    Web 3.0: better infrastructure needed to stop centralization

    Avoiding NFTs scams: how to spot scams

    Avoiding NFTs scams: how to spot scams

    Is buying real estate in the metaverse a wise investment?

    Is buying real estate in the metaverse a wise investment?

    FOMO, the crypto investor’s worst enemy – 10 Rules to fight it

    FOMO, the crypto investor’s worst enemy – 10 Rules to fight it

No Result
View All Result
CoinsMag
No Result
View All Result

Thorchain loose (again) 8 million in cryptocurrencies

August 2, 2021
in News
Thorchain loose (again) 8 million in cryptocurrencies

Just under two weeks ago, the ThorChain (RUNE) protocol was the target of an attack resulting in the loss of $5 million. Unfortunately, the protocol has just been hit by a second attack, even more devastating than the first.

The first THORChain attack

During the night of July 15-16, the Thorchain cross-chain liquidity protocol was the target of an attack aimed at the pools deployed on Ethereum. In total, the attacker got away with a loot of just under 5 million dollars in ETH.

In practice, a flaw was present in the Bitfröst Ethereum node, allowing liquidity transfers from one chain to another.

Subsequently, the bug was solved and the funds refunded via the protocol’s cash fund. In parallel, the developers tried to contact the attacker to ask him to return the funds in exchange for a reward for identifying the bug, without success. In addition, the protocol’s teams have announced that they are accelerating audits of all their contracts.

The second attack: 8 million stolen

Unfortunately, the respite was short-lived for the protocol teams. On July 26, the protocol was the victim of a second attack, this time much more devastating in terms of losses.

Once again, it was the Bitfröst Ethereum node that was the target of the attack. According to information reported by the specialized media Rekt, the attack took place in five acts:

  • The attacker created a fake router, then triggered a deposit event by sending ETH.
  • This router then passed a small amount of ETH via the returnVaultAssets() function, however the router was defined as an Asgard vault, a node that is supposed to hold the funds of the operator nodes.
  • In turn, the real Thorchain router transferred ETH to the fake Asgard vault.
  • This created a fake deposit event containing a malicious memo.
  • The Bitfröst ETH node, on the other hand, intercepted this event as a normal deposit and refunded it to the attacker due to a wrong definition of the memo.
  • As a result, the attacker managed to extract the equivalent of $8 million from the liquidity pools, increasing the total amount lost by the protocol to over $13 million in just two weeks.

The stolen funds break down as follows:

  • 966.62 ALCX;
  • 20,866,664.53 XRUNE;
  • 1,672,794.01 USDC;
  • 56,104 SUSHI ;
  • 6.91 YFI;
  • 990,137.46 USDT.

When the attacker teaches the lesson

In addition to stealing the funds, the attacker left a note for the developers. In it, he explains that he could have stolen even more funds if he wanted to.

A message containing lessons left by the hackers:

“I could have taken ETH, BTC, LYC, BNB and BEP20s if I had waited. I wanted to teach a lesson by minimizing the damage.”

In the rest of his message, the attacker explains that several critical issues are present in the protocol code. In addition, the latter reminds the importance of audits that are not optional and gives notice to the developers to pause the protocol until the said audits have been performed.

“Several critical issues. A 10% VAR bonus would have prevented this. Disable the protocol until the audits are complete. Audits are not a good thing to have. Don’t rush a code that checks 9 digits.”

Indeed, audits of the protocol are underway, yet it is already managing several million dollars.

Unsurprisingly, the price of the RUNE token, Thorchain’s own token, saw a 15% drop in price following the attack.

In his speech at the ETHCC in Paris, Vitalik Buterin expressed his desire to see Ethereum evolve beyond DeFi. An understandable desire, but far from the realities of the protocol. Indeed, before creating new applications, the ecosystem should focus on the implementation of security standards, to avoid that hacks continue to tarnish its image.

ShareTweetPinSendShareSend
Previous Post

Ethereum creator’s $1 billion donation to India: a poisoned gift?

Next Post

Square, the Bitcoin and fractional payment giant?

Related Posts

SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?
News

SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

December 30, 2022
2.3k
The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000
Bitcoin

The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

December 22, 2022
2.1k
Waltio outlines strategy to reduce its taxation on cryptocurrencies
Blockchains

Waltio outlines strategy to reduce its taxation on cryptocurrencies

December 1, 2022
2.5k

Popular news

  • How do Web3 and NFTs enrich the live music experience?

    How do Web3 and NFTs enrich the live music experience?

    0 shares
    Share 0 Tweet 0
  • Paxos offers $1.5 billion deal to MakerDAO for DAI collateralization

    0 shares
    Share 0 Tweet 0
  • Free crypto / referral codes

    0 shares
    Share 0 Tweet 0
  • SOL down 96.5% since its ATH: Will the Solana blockchain survive FTX?

    0 shares
    Share 0 Tweet 0
  • The Human Rights Foundation funds the Bitcoin ecosystem (BTC) with $325,000

    0 shares
    Share 0 Tweet 0

Categories

  • Privacy Policy

© 2022 - CoinsMag

No Result
View All Result
  • HOME
  • NEWS
  • BLOCKCHAINS
  • DEFI
  • NFT
  • GAMES
  • METAVERSE
  • FREE CRYPTOS
  • TUTORIALS

© 2022 - CoinsMag

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.
Ads Blocker Image Powered by Code Help Pro

Ads Blocker Detected!!!

We have detected that you are using extensions to block ads. Please support us by disabling these ads blocker.