Share this article

BlockTower Capital Loses $1.5M in DeFi Market Aggregator Dexible Exploit: Blockchain Data

The hacker exploited a weakness in a smart contract code, allowing them to drain funds from certain crypto wallets. Crypto “whales” accounted for 85% of the losses.

Updated Feb 17, 2023, 5:40 p.m. Published Feb 17, 2023, 5:29 p.m. 1 min read
(Shutterstock)

Decentralized exchange aggregator Dexible suffered a $2 million exploit early Friday, the protocol said in a document posted on its Discord server.

Dexible tweeted that the hacker exploited a weakness in the smart contract code, allowing them to drain funds from crypto wallets with funds that have been approved for spending.

The team added that “a few whales,” meaning large crypto holders, accounted for about 85% of the losses.

Blockchain data shows that digital asset investment firm BlockTower Capital was among the victims.

The wallet address associated with the Dexible exploiter on blockchain monitoring platform Etherscan drained some $1.5 million in TRU tokens from a wallet labeled as BlockTower’s by Arkham Intelligence, a blockchain intelligence firm. Blockchain intelligence firm Nansen also labeled the address as BlockTower Capital’s.

The Dexible exploiter traded the stolen funds for ETH using SushiSwap, then transferred the funds to TornadoCash. (Arkham Intelligence)

BlockTower did not immediately return CoinDesk’s request for comment.

Blockchain transactions on Arkham show that the exploiter transferred the stolen TRU tokens to SushiSwap to trade for ether (ETH). Then, they send ETH to crypto mixer service provider TornadoCash.

The exploit affected 13 wallets on Arbitrum and five wallets on Ethereum, draining a total of per Dexible's report.

"We have paused these contracts, while we get a full picture of the situation," Michael Coon, chief executive of Dexible, posted on Discord.

Lebih untuk Anda

XRP News

A draft XRPL amendment notes that flash loan attacks are "structurally impossible" on the network because of how its transactions are built, an architectural quirk that has spared the chain from the exploit class that has cost Ethereum DeFi billions.

Yang perlu diketahui:

  • Recent DeFi exploits on protocols like Thorchain, Drift and KelpDAO have relied on flash loans, a mechanism that does not exist on the XRP Ledger.
  • Because XRPL transactions are atomic and cannot include composable intra-transaction calls, flash loan attacks are structurally impossible on the network.
  • As XRPL pursues AMM upgrades...