您现在的位置是:Harvest Finance’s “Engineering Error” Allowed $24M Theft >>正文
Harvest Finance’s “Engineering Error” Allowed $24M Theft
上海品茶网 - 夜上海最新论坛社区 - 上海千花论坛792人已围观
简介The post-mortem report promised affected users would be remediatedHarvest Finance is a DeFi yield ag...
The post-mortem report promised affected users would be remediated
Harvest Finance is a DeFi yield aggregator that allows users to earn maximum yields by implementing investment strategies on DeFi projects. However, yield farming is still experimental and smart contracts carry risks, as evidenced yesterday.
The hack took place on October 26 at 02:53:31 UTC when the attacker stole a total of $24 million from Harvest Finance’s USDC and USDT vaults by manipulating the value of assets inside the Y pool of Curve.fi. The attacker exploited an arbitrage and impermanent loss using a large flash loan.
Harvest Finance’s post-mortem report, released late last night, detailed how the attacker used market trades with a large volume to decrease the share price of fUSDC by approximately 1%. However, as the arbitrage check inside Harvest’s strategy did not exceed the 3% threshold, it did not revert the transaction.
After 17 attack transactions on the USDC vault, the attacker repeated the process for the USDT vault, taking a total of seven minutes, though they then sent back almost $2.5 million to the Harvest deployer.
The hack caused the share price of the USDC vault to fall by 13.8% and that of the USDT vault to fall by 13.7%. Harvest Finance estimated a 3.2% loss of the total value locked in the protocol, and CoinGecko data show that FARM, the native token of Harvest Finance, dropped 58% from $232.78 to $96.90 in the three hours following the attack.
In response, Harvest Finance have taken responsibility for the engineering error that allowed the attack to take place and are making remediation for affected users a top priority. They are also delaying the smart contract improvements, scheduled to be released today, until their security has been reassessed.
The team are now looking into mitigation strategies for the future, such as a stricter threshold for the arbitrage check — using oracles to determine asset price — and the implementation of a commit-and-reveal mechanism for deposits, which would mean users could no longer perform deposits and withdrawals within a single transaction.
Harvest Finance said they had no interest in doxxing the attacker but offered a $100,000 bounty for the first person or team to help return the funds, or a $400,000 bounty if the return takes place in the next 36 hours.
However, some in the crypto community think that the Harvest Finance developers may actually be involved in the attack. DeFi analyst Chris Blec pointed out on Sunday that Harvest Finance was run by an anonymous team with one admin key that could potentially be used to drain funds.
Tags:
转载:欢迎各位朋友分享到网络,但转载请说明文章出处“上海品茶网 - 夜上海最新论坛社区 - 上海千花论坛”。http://www.jz08.com.cn/news/645246.html
相关文章
SEC chair hints at FTX comeback, while Memeinator presales enter stage 6
Harvest Finance’s “Engineering Error” Allowed $24M TheftSEC has suggested FTX revival if it follows the rules.Memeinator has caught the attention of investo...
阅读更多
PrimeXBT Analysis: Oil outlook Worsening As We Move Into The Final Quarter Of The Year
Harvest Finance’s “Engineering Error” Allowed $24M TheftThis year has not been a particularly good one for any of the markets. From commodities to stocks, e...
阅读更多
Is Ethereum (ETH) a buy after the gas fees are down?
Harvest Finance’s “Engineering Error” Allowed $24M TheftEthereum gas fees are 62% lower than the previous monthWeb3 and NFTs drive Ethereum OutperformanceEt...
阅读更多
热门文章
- Tezos price turns bullish as France selects blockchain for stablecoin experiment
- Bitcoin hints at sell signal after hitting 3
- Ripple (XRP) Sees Strong Recovery Over The Past Few Days
- First big winner in 2022, added value of 21%: buy POWR now
- Ethereum Reach A $1 Trillion Valuation This Year
- The best cryptocurrencies to buy for short term gains
最新文章
ChainLink price recovers above $13.60 but bulls face uphill task near $15.00
Bitcoin breaks horizontal resistance at the $32k area. The rally extended above $35k.
Harvest Finance’s “Engineering Error” Allowed $24M Theft
Ripple (XRP) Dips Below $0.5 Post Flare Airdrop
Elrond price jumps 33% as eTorox lists EGLD
Top 10 Cheapest Cryptocurrencies to Buy Right Now