Share this article
Terra Blockchain Restarts After $4M Exploit
A reentrancy attack briefly halted the network. It restarted after an “emergency” chain upgrade.
Updated Jul 31, 2024, 11:14 a.m. Published Jul 31, 2024, 11:11 a.m.
- Terra blockchain halted operations on Wednesday after a reentrancy attack exploited a vulnerability, with over $4 million in various tokens stolen.
- The exploit targeted a vulnerability that had been disclosed in April, but reappeared in a June upgrade.
Terra developers briefly paused network operations on Wednesday after an apparent reentrancy attack led to over $4 million of various tokens being taken from the blockchain.
The blockchain halted at block height 11430400 for an emergency patch to fix the vulnerability. The fix was completed at 04:19 UTC. Validators, the entities that support the network, with over 67% of the voting power on Terra upgraded their nodes to prevent the exploit from recurring, according to a post on the X.
STORY CONTINUES BELOW
Security firm Beosin estimated $3.5 million of the USDC stablecoin, $500,000 in the USDT stablecoin, 2.7 bitcoin and more than 60 million of Astroport’s ASTRO were stolen in the attack.
“The attacker exploited a reentrancy vulnerability in the timeout callback of ibc-hooks,” Beosin said. “The vulnerability was disclosed in April this year.”
Terra blockchain was exploited for ~60M $ASTRO, 3.5M $USDC, 500k $USDT, and 2.7 $BTC.
— Beosin Alert (@BeosinAlert) July 31, 2024
The attacker exploited a reentrancy vulnerability in the timeout callback of ibc-hooks. The vulnerability was disclosed in April this year:https://t.co/CY39X28KyE https://t.co/hY9xA40hbJ
ASTRO fell 56% in the aftermath of the attack, CoinGecko data shows. Meanwhile, Terra's luna classic (LUNC) tokens are down 3.4% in the past 24 hours.
Reentrancy is a common bug that allows exploiters to trick a smart contract by making repeated calls to a protocol to steal assets. A call authorizes the smart contract address to interact with a user’s wallet address.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
NFT Project Pudgy Penguins Takes Over Las Vegas Sphere in Holiday Campaign
The NFT brand’s animated segments will air on the Sphere across Christmas week, signaling the crypto company's move into real-world consumer markets.
What to know:
- Pudgy Penguins will run an ad campaign at the Las Vegas Sphere during Christmas week, one of the few crypto brands to secure a spot at the high-profile venue.
- The NFT project, which launched on Ethereum in 2021, has expanded into physical toys and digital gaming as part of a broader consumer push.
- Pudgy Penguins briefly overtook Bored Apes in floor price earlier this year and recently launched its PENGU token on Solana, now trading on major exchanges.
Top Stories
