Connect with us
Active Currencies 14033
Market Cap $2,551,159,852,220.00
Bitcoin Share 50.88%
24h Market Cap Change $0.34

How Inverse Finance’s $1.2 million exploit played out behind the scenes

2min Read

Share this article

The string of DeFi hacks continued to ensue in the crypto market, with the latest victim being Inverse Finance. It suffered a fresh exploit on 16 June worth $1.2 million. It is the latest attack on the protocol after April’s $15.6 million exploits. The PeckShield team released the post-mortem soon after the incident but investors remain on alert.

Another day…another hack

An attacker was able to get away with $1.2 million by exploiting a flash loan on Inverse Finance. The attack was made possible by the price oracle manipulation. As per the Inverse summary, the price of the LP token was manipulated much higher to execute the attack.

Per PeckShield, the attack was started with an initial fund of 1 ETH which is withdrawn from Tornado Cash. Currently, 68 ETHs in illicit gains are resting in the hacker’s account. Another 1000 ETHs were deposited to Tornado Cash afterward.

Source: PeckShield

As per Inverse, this is how the attack came about,

The affected market—yvcrv3crypto—utilized Chainlink price data instead of the internal exchange rate of the Curve protocol, which allowed the attacker to flash-borrow 27,000 in wBTC and trade it into the tri-crypto pool, which caused the price of the yvcrv3crypto LP token to jump in value, in the eyes of the oracle and created an opportunity to borrow DOLA against that collateral in Frontier.”

What now?

The Inverse team released information that DOLA remained resilient against the attack. Moreover, the amount of DOLA liquidity deployed across DOLA Fed contracts also functioned effectively.

Later, Inverse released news that borrowing has been temporarily paused with DOLA out of their money market. Inverse Finance has also announced measures to get the funds back after the incident. To that end, they announced a ‘generous bounty’ for the attacker(s) if the money was returned. The bounty would also be rewarded for recovering the stolen funds. They have also hired Risk DAO to add additional security operations.

It is now yet to be seen how this incident plays out


Kanav is a journalist at AMBCrypto. He has a Masters in Media and International Conflict and is interested in areas of digital society, crypto developments in the political sphere and the socio-cultural impact of a crypto-society.
Read the best crypto stories of the day in less than 5 minutes
Subscribe to get it daily in your inbox.
Please check the format of your first name and/or email address.

Thank you for subscribing to Unhashed.