Decentralized finance protocol Onyx suffered a security exploit, leading to a loss of more than $2.1 million.
The attacker drained the funds by exploiting a specific vulnerability in Onyx’s codebase, known as “precision loss,” according to analysts at the security firm BlockSec. Specifically, the exploit was executed using an integer rounding issue, aided by a flash loan.
“The attacker took out a flash loan of a substantial amount of ETH, swapped it for PEPE, and donated it to a specific pool to manipulate the exchange rate. Subsequently, due to the so-called precision loss, the attacker was able to withdraw more of the underlying asset by burning fewer shares,” Matthew Jiang, director of security services at BlockSec explained.This vulnerability originates from an older forked version of Compound V2, which Onyx incorporates into its underlying architecture.
The attacker has so far sent 700 ETH to the crypto mixing service Tornado Cash, on-chain data shows.© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Ethereum dApps deemed “not-decentralized” after WalletConnect blocks Russian users from the protocolEthereum is called the home of decentralized finance (DeFi), owing to the vast array of protocols running on the chain, which amount to nearly 950.
Read more »
Bitcoin builder climbs Africa's tallest mountain to raise awarenessThe Bitcoin Lightning Network and decentralized protocol NOSTR fuels local boy Kweks' Kilimanjaro expedition.
Read more »
Salman Rushdie May Confront Attacker in CourtAuthor Salman Rushdie could take the stand against the man charged with repeatedly stabbing him before a lecture when the defendant goes on trial early next year, a prosecutor said Friday. 'He is on the people's witness list right now heading into trial,' Chautauqua County...
Read more »
Elderly man leaving Walmart approached, punched in the face; attacker on the looseAuthorities want to catch the man who walked into a Walmart store and punched an elderly man, who was leaving, in the face. Twice.
Read more »
Elderly man leaving Walmart approached, punched in the face; attacker on the looseAuthorities want to catch the man who walked into a Walmart store and punched an elderly man, who was leaving, in the face. Twice.
Read more »
Salman Rushdie may confront alleged attacker when trial begins in January 2024The suspect pleaded not guilty to charges of assault and attempted murder.
Read more »