Share this article

Avalanche-Based Zabu Finance Sees $3.2M Hack

The attacker used Zabu’s “Transfer Tax” mechanism to mint tokens, sending their value to zero.

Updated May 11, 2023, 4:33 p.m. Published Sep 13, 2021, 12:32 p.m. 1 min read
(Shutterstock)

Zabu Finance, an Avalanche-based decentralized finance (DeFi) protocol, has been exploited for $3.2 million.

  • The protocol tweeted Saturday that its Spore Pool was possibly under an exploit and confirmed the attack on Sunday.
  • The attacker used Zabu’s “Transfer Tax” mechanism to mint tokens, causing their value to slide to zero from about $0.0047.
  • Having removed 4.5 billion ZABU tokens, the attacker then dumped them on the Trader Joe’s and Avalanche Pangolin exchanges on the Avalanche network.
  • Zabu plans to take a snapshot of the situation immediately before the exploit to protect both users who invested before the hack and those who bought in afterwards.
  • The exploit totaling an estimated $3.2 million is probably the “first big exploit” on the Avalanche blockchain, according to DeFi analytics provider DeFiprime.

Read more: Can Avalanche Keep It Up? DeFi Users Rush In as Incentives Roll Out


More For You

Bitcoin quantum resistant. (Chris Ried/Unsplash)

Andrew Gault, the venture capitalist who funded the quantum hardware labs now threatening bitcoin, says the industry is looking in the wrong place. Google's own security team moved in the same direction in March.

What to know:

  • Security experts warn that the most urgent quantum threat to bitcoin and the broader financial system is not wallet keys but the encrypted authentication data already moving between institutions and being quietly harvested today.
  • Adversaries are pursuing a “harvest now, decrypt later” strategy, stockpiling encrypted interbank messages, payment records and...