Exploited MEV Bot Incurs $2M Loss in Curve Pool Swaps: Data

Curve Finance Hacker Returns $5.4 Million, But CRV Dumps 15%



According to PeckShield Alert data, an unknown Miner Extractable Value (MEV) bot has fallen victim to a hack, causing a loss of approximately $2 million.

The incident, which took place in the renowned curve pools, has led to multiple large swaps and subsequent reverse swap arbitrage.

Attacker Manipulates Curve Pool

The exploitation occurred when the arbitrage function, 0xf6ebebbb(), lacked proper authentication, providing an open door for the attacker to manipulate swaps across multiple curve pools. This malicious activity resulted in significant slippage, causing substantial losses for the affected parties.

As the situation unfolded, the attacker cunningly reversed the swaps to maximize their profits, compounding the impact of this incident.

Phemex

The attacker exploited an arbitrage bot, resulting in a loss of $2.3 million through the Curve pool. They discovered an exposed function within the bot, which enabled them to trigger a transaction from Wrapped Ether (WETH) to Wrapped Bitcoin (WBTC).

Subsequently, they executed a flash loan for 27,255 WETH (equivalent to $51.36 million), utilizing it to significantly manipulate the price ratio of WETH/WBTC within the Curve pool.

By destabilizing the pool, the attacker compelled the arbitrage bot to convert 1,339.8 WETH (approximately $2.52 million) into 6.95 WBTC (around $244,000).

It is important to note that the owner of the MEV bot had already withdrawn funds from the contract prior to the attack.

Curve Finance Prior Exploits

On July 30, 2023, a series of exploitations occurred in multiple liquidity pools on Curve Finance, resulting in losses of approximately $70 million. This incident raised significant concerns within the DeFi community. The attacks were made possible due to a vulnerability in Vyper, a third-party Pythonic programming language utilized by Ethereum smart contracts, including those of Curve and other decentralized protocols.

It is important to note that, following the initial incident, both white hat hackers and Miner Extractable Value (MEV) bot operators collaborated to recover a portion of the lost funds. As a result, the final value of the losses may be lower than the initial reports suggested.

Less than a week after the exploit, the hacker returned 4,820 alETH and 2,258 ETH to Alchemix, which amounted to approximately $12.7 million.

On August 6, 2023, Curve Finance announced via Twitter that the deadline for the hacker to voluntarily return the remaining funds had passed. As a result, the company extended its bounty offer of $1.85 million to anyone who could identify the hacker.

SPECIAL OFFER (Sponsored)
Binance Free $100 (Exclusive): Use this link to register and receive $100 free and 10% off fees on Binance Futures first month (terms).





Source link

Leave a Reply

Your email address will not be published. Required fields are marked *

Pin It on Pinterest

Crypto-Trend
Fiverr
Crypto-Trend
Curve Finance Hacker Returns $5.4 Million, But CRV Dumps 15%
Phemex
Coinmama
Dymension Is Preparing For Its Season 2 Airdrop & Beyond Upgrade
VeChain Kicksoff $15M StarGate Staking Program After SEC's Staking Clarity
Ethereum ETH Price Prediction 2025, 2026
Coinpedia - Fintech & Cryptocurreny News Media
Trump’s $35 Trillion Debt Plan: Analysing The Impact on Cryptos
Cardano Price Prediction Will ADA Hit $2 After Midnight Airdrop Buzz
bitcoin
ethereum
tether
binancecoin
solana
ripple
usd-coin
staked-ether
dogecoin
binance-usd
Changelly
Blockfi
Dogwifhat up 20% in 7 days as Solana meme coin regains momentum
Crypto Theft Campaign Hits Firefox Users with Wallet Clones
Hut 8 Secures Major Power Contracts in Canada
Moo Deng Surges As Viral Pygmy Hippo’s Birthday Plans Revealed by Zoo
John Smedley Raises $30.5M For New Game On Etherlink
Dogwifhat up 20% in 7 days as Solana meme coin regains momentum
Crypto Theft Campaign Hits Firefox Users with Wallet Clones
Hut 8 Secures Major Power Contracts in Canada
Moo Deng Surges As Viral Pygmy Hippo’s Birthday Plans Revealed by Zoo
bitcoin
ethereum
tether
binancecoin
solana
ripple
usd-coin
staked-ether
dogecoin
binance-usd
bitcoin
ethereum
tether
binancecoin
solana
ripple
usd-coin
staked-ether
dogecoin
binance-usd