Share this article
DeFi Transaction Batching Tool Exploited for $14M
The exploiter used a fake contract to trick the dapp into thinking it was an Aave v2 update.
Updated Sep 14, 2021, 12:18 p.m. Published Feb 27, 2021, 10:58 p.m. 1 min read
Decentralized finance (DeFi) application Furucombo lost $14 million after an exploiter apparently used a fake contract to trick the app into thinking it was an Aave v2 update. Furucombo later tweeted that the vulnerability had been fixed.
The exploiter used this contract to transfer approved tokens to its address, The Block Research’s Igor Igamberdiev tweeted on Saturday.
The attack also affected DeFi protocol Cream Finance’s treasury funds, taking $1.1 million, according to a tweet from the protocol’s team.
Furucombo is a tool that allows users to bundle orders on various DeFi protocols and to send them out in one transaction.
“We're in the process of investigating the stolen fund and organizing the follow-up actions,” Furucombo tweeted.
Más para ti
The S&P 500 posted its longest weekly winning streak since 2023 and Brent oil stabilized near $92 on US-Iran ceasefire hopes. The biggest cryptocurrencies still drifted lower, with Hyperliquid's HYPE the only major name to rally.
Lo que debes saber:
- U.S. stocks and oil rallied, with the S&P 500 logging a ninth straight weekly gain and Brent crude hovering near $92 a barrel on hopes for a U.S.-Iran ceasefire extension.
- Major cryptocurrencies lagged the macro rally, with bitcoin, ether and other large-cap tokens falling around 2% to 6% amid cooling...
Top Stories
