Deus Finance Exploited Twice in Two Months, Over $13 Million Stolen

Blockchain safety company PeckShield reported that Deus Finance was exploited for about $13.4 million earlier at the moment. This comes only a few months after the protocol fell sufferer to the same hack.

• PeckShield took it to Twitter to offer extra particulars on the most recent DeFi assault. In it, the hacker went by way of a well-recognized route through the use of a flashloan-assisted manipulation of worth oracle that “reads from the StableV1 AMM – USDC/DEI pair.”
• The attacker managed to govern the worth of collateral DEI and used it to borrow and drain the pool.
• Overall, the unknown hacker managed to steal about $13.4 million price of digital belongings. However, PeckShield warned that the losses for the protocol may very well be considerably greater.
• The attacker borrowed round 800 ETH to launch the hack, all withdrawn from Tornado Cash and tunneled to Fantom by way of Multichain.
• The hacker’s address at present reveals that they’ve swapped the stolen funds for ETH and have despatched them again to Tornado Cash.

2/ The hack is made potential because of the flashloan-assisted manipulation of worth oracle that reads from the StableV1 AMM – USDC/DEI pair. The manipulated worth of collateral DEI is then used to borrow and drain the pool. Sounds acquainted?https://t.co/3uk44CXo78 pic.twitter.com/ng2BYPPOiY

— PeckShield Inc. (@peckshield) April 28, 2022

• CryptoPotato reported in mid-March when Deus Finance was exploited for the primary time. The attacker in that incident used an equivalent strategy, however the stolen quantity was quite a bit smaller – round $3 million in DAI and ETH.