Cryptocurrencies: 5,975
Markets: 545
Marketcap: $ 554.72 B
24h Vol: $ 101.34 B
BTC Dominance: 61.24%

Global market data

Cryptocurrencies: 5,975
Markets: 545
Marketcap: $ 554.72 B
24h Vol: $ 101.34 B
BTC Dominance: 61.24%

[THE BLOCK] DeFi project Akropolis exploited for over $2 million

The Block

Decentralized finance (DeFi) protocol Akropolis lost $2 million in DAI in an exploit on Thursday morning. According to an update from the Akropolis team, a post-mortem analysis is forthcoming, and the team is exploring ways to reimburse those affected.

Akropolis is a DeFi lending and savings service provider that enables users to take out loans and generate yield on cryptocurrency deposits. The savings portion of the service, which utilizes Curve protocol, was exploited in the hack earlier in the day.

The contract address 0xe2307837524Db8961C4541f943598654240bd62f, which appears to the exploiter, executed a series of dYdX flash loan attacks on Akropolis’ YCurve and sUSD savings pools before sending the resulting $2 million DAI to a different address: 0x9f26ae5cd245bfeeb5926d61497550f79d9c6c1c. The funds do not appear to have left that address as of the time of this writing.

Flash loans allow users to borrow funds instantly, given they are returned within one transaction block, meaning users can take advantage of uncollateralized loans. In the case of the Akropolis attack, a combination of a re-entrancy attack and dYdX flash loan origination exploited the savings pools. The pools had been audited by two firms, according to Akropolis, but the attack vectors used by the hacker were not identified in either audit.

The majority of the funds on the protocol are safe, according to Akropolis. Compound DAI< Compound USDC, AAVE sUSD, AAVE bUSD, Curve bUSD and Curve sBTC were unaffected. Native AKRO and ADEL staking pools were also untouched. 

In the meantime, all stablecoin pools have been paused and exchanges have been informed of the hack. The Akropolis team is in discussions with security specialists as it reviews its development and security processes for the coming analysis.

© 2020 The Block Crypto, Inc. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Find the full article here

You have successfully subscribed to the newsletter

There was an error while trying to send your request. Please try again.

Liquidary.com will use the information you provide on this form to be in touch with you and to provide updates and marketing. You can unsubscribe anytime.