Share this article
DeFi Lending Protocol Agave's AGVE Plunges Over 20% Amid Exploit Investigation
Hundred Finance, another lending protocol on the Gnosis chain, was also exploited in an apparent “re-entrancy” attack, according to a blockchain security researcher.
Updated May 11, 2023, 5:57 p.m. Published Mar 15, 2022, 7:26 p.m.
AGVE, the token of non-custodial money market and lending protocol Agave, plunged over 20% on Tuesday after the company said it’s looking into an exploit.
- “Agave is currently investigating an exploit on the agave finance protocol. We will update you as soon as we know more,” the DAO said in a tweet on Tuesday afternoon. “Contracts have been paused until we figure out how to resolve the situation."
- Hundred Finance, like Agave a multi-chain lending protocol on the Gnosis chain, was also attacked, according to a tweet from the platform. “Unfortunately Hundred and Agave have both been exploited on Gnosis chain today,” Hundred wrote. “Gnosis team is aware, investigation is ongoing. All the Hundred markets on all chains paused for now.”
- Hundred Finance’s token, HND, was modestly lower in Tuesday action.
- According to blockchain security researcher Mudit Gupta, the attack vector in both cases was a “re-entrancy attack”
- That’s made possible because “the official bridged tokens on Gnosis are non-standard and have a hook that calls the token receiver on every transfer,” Gupta wrote. According to Gupta, the attackers were able borrow back more than the collateral they were depositing, and continually repeat the process by repeatedly re-entering the system.
Agave and Hundred Finance were exploited today on Gnosis chain (formerly xDAI).
— Mudit Gupta (@Mudit__Gupta) March 15, 2022
The underlying reason for the hack is that the official bridged tokens on Gnosis are non-standard and have a hook that calls the token receiver on every transfer. This enables reentrancy attacks. pic.twitter.com/8MU8Pi9RQT
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Two Casascius Coins Holding 2K BTC Moved After 13 Years of Inactivity
The Casascius coins were designed as offline cold storage with embedded private keys, but the project was shut down in 2013 due to regulatory pressure from FinCEN.
What to know:
- Two long-dormant bitcoin wallets tied to physical Casascius coins moved 2,000 BTC ($180M) after over a decade of inactivity.
- The Casascius coins were designed as offline cold storage, containing embedded private keys, but the project was shut down in 2013 due to regulatory pressure from FinCEN.
- The recent transfers' purpose is unclear, but could be linked to degrading physical components or precautionary moves to preserve access.
Top Stories
