{"id":242041,"date":"2022-06-09T01:05:00","date_gmt":"2022-06-09T00:05:00","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=242041"},"modified":"2022-06-09T10:31:15","modified_gmt":"2022-06-09T09:31:15","slug":"attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/","title":{"rendered":"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug"},"content":{"rendered":"<p>On June 7, someone posted a <a href=\"https:\/\/www.reveddit.com\/y\/Straight-Hat3855\/\">Reddit thread<\/a> that was later deleted by the forum's moderator. The thread contained a serious claim \u2014 the Osmosis network had a bug that allowed liquidity providers to earn an extra 50% when adding and withdrawing liquidity.<\/p>\n<p>Osmosis (<a href=\"https:\/\/cryptoslate.com\/coins\/osmosis\/\">OSMO<\/a>) is a blockchain in the Cosmos ecosystem that offers a decentralized exchange and wallet.<\/p>\n<p>The claim appeared improbable until the network was halted for emergency maintenance.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Hello <a href=\"https:\/\/twitter.com\/osmosiszone?ref_src=twsrc%5Etfw\">@osmosiszone<\/a> friends. As of block #4713064 the Osmosis chain has been halted for emergency maintenance. <\/p>\n<p>At this time the Osmosis DEX and Wallet are inoperable, until repairs are completed. <\/p>\n<p>\ud83e\uddeaPlease stand by as Devs work to get us back on.<\/p>\n<p>&mdash; \ud83e\udd99\ud83e\uddeaEmperorOsmo(Hathor Nodes)\ud83e\uddea\ud83e\udd99 (@Flowslikeosmo) <a href=\"https:\/\/twitter.com\/Flowslikeosmo\/status\/1534379632966963201?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Although the Osmosis team did not acknowledge an exploit at the time, the halt came about after a few attackers drained around $5 million.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Liquidity pools were NOT &quot;completely drained&quot;.<\/p>\n<p>Devs are fixing the bug, scoping the size of losses (likely in the range of ~$5M), and working on recovery. <\/p>\n<p>More info to come. <a href=\"https:\/\/t.co\/WOu7MMgSUM\">https:\/\/t.co\/WOu7MMgSUM<\/a><\/p>\n<p>&mdash; Osmosis \ud83e\uddea (@osmosiszone) <a href=\"https:\/\/twitter.com\/osmosiszone\/status\/1534432704246292480?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The Osmosis team has identified the bug and developed a patch that is being tested before deployment. Developers are still working on restarting the network.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Update:  The bug has been identified and a patch written.<\/p>\n<p>More testing is underway before validators are recommended to coordinate a restart.<\/p>\n<p>Full bug report and action plan for more thorough and proper end to end testing of chain upgrades to follow in coming days. <a href=\"https:\/\/t.co\/DjJMOEQxrT\">https:\/\/t.co\/DjJMOEQxrT<\/a><\/p>\n<p>&mdash; Osmosis \ud83e\uddea (@osmosiszone) <a href=\"https:\/\/twitter.com\/osmosiszone\/status\/1534470729797976064?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>So this is how the attackers managed to exploit the network, as shown by on-chain activity:<\/p>\n<p>A Twitter user pointed out in a thread that one of the attackers added liquidity in the form of USD Coin (<a href=\"https:\/\/cryptoslate.com\/coins\/usd-coin\/\">USDC<\/a>) and OSMO. The attacker then received GAMM LP tokens in return, which represented their share in the pool. These perpetrators immediately withdrew the GAMM LP tokens, thereby gaining 50% extra than the amount of USDC and OSMO that had been added as liquidity.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">First off, apparently a subredditer called this out a while back &#8211; so props to them.<\/p>\n<p>\u27bc So the wallet (osmo1hq) is the exploiter.<\/p>\n<p>First he provides Liquidity in the form of <a href=\"https:\/\/twitter.com\/search?q=%24USDC&src=ctag&ref_src=twsrc%5Etfw\">$USDC<\/a> (I verified this in the source code) + <a href=\"https:\/\/twitter.com\/search?q=%24OSMO&src=ctag&ref_src=twsrc%5Etfw\">$OSMO<\/a><\/p>\n<p>He then recieves <a href=\"https:\/\/twitter.com\/search?q=%24GAMM&src=ctag&ref_src=twsrc%5Etfw\">$GAMM<\/a> LP tokens in return. <a href=\"https:\/\/t.co\/K3JzrDRPMN\">pic.twitter.com\/K3JzrDRPMN<\/a><\/p>\n<p>&mdash; Andeh #OnChain (@0xLosingMoney) <a href=\"https:\/\/twitter.com\/0xLosingMoney\/status\/1534474264773988352?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The perpetrator then swapped the OSMO tokens for ATOM and sent them to other wallets. This same process was repeated over and over again \u2014 each time the attacker gained 50% more tokens.<\/p>\n<p>Most of the proceeds in OSMO were swapped for ATOM and transferred to a wallet that contains $9 million worth of ATOM tokens, the Twitter thread said. However, this wallet did not include the USDC tokens the attacker gained by exploiting the bug \u2014 the USDC tokens were neither swapped nor transferred, the thread added.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Once he&#39;s had his fun,<\/p>\n<p>\u27bc He sends the <a href=\"https:\/\/twitter.com\/search?q=%24ATOM&src=ctag&ref_src=twsrc%5Etfw\">$ATOM<\/a> out to a chain of other wallets.<\/p>\n<p>It&#39;s hard to tell on the <a href=\"https:\/\/t.co\/o02L0T5QtQ\">https:\/\/t.co\/o02L0T5QtQ<\/a> scanner how much in total it was, but I tracked the wallets and&#8230; <a href=\"https:\/\/t.co\/dchu2pDgQG\">pic.twitter.com\/dchu2pDgQG<\/a><\/p>\n<p>&mdash; Andeh #OnChain (@0xLosingMoney) <a href=\"https:\/\/twitter.com\/0xLosingMoney\/status\/1534474290917044224?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h2>Osmosis identifies attackers; FireStake comes forth<\/h2>\n<p>Four attackers have been identified as the key perpetrators who stole over 95% of the exploited amount, according to a Twitter thread by Osmosis. Two out of the four attackers have volunteered to return the complete stolen funds. The other two have transactions to and from centralized exchanges, which have been alerted to identify the perpetrators and recover the funds.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Update:<\/p>\n<p>&#8211; 4 individuals have been identified that account for 95%+ of realized exploit amount.<\/p>\n<p>&#8211; 2 out of the 4 individuals has proactively expressed intent to return the exploited amount in full.<\/p>\n<p>&mdash; Osmosis \ud83e\uddea (@osmosiszone) <a href=\"https:\/\/twitter.com\/osmosiszone\/status\/1534585650476994560?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Barely an hour after Osmosis' Tweet regarding the attackers, FireStake &#8212; a validator in the Cosmos ecosystem &#8212; came forward in a Tweet and admitted to exploiting the LP bug but noted that they are trying to &#8220;set things right&#8221; and working with the Osmosis team to return the exploited funds.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Dear <a href=\"https:\/\/twitter.com\/osmosiszone?ref_src=twsrc%5Etfw\">@osmosiszone<\/a> community, many of you know about the Osmosis LP bug that occurred yesterday. <\/p>\n<p>In disbelief of it being real, two members of <a href=\"https:\/\/twitter.com\/fire_stake?ref_src=twsrc%5Etfw\">@fire_stake<\/a> started testing to see if the bug existed, testing grew into a temporary lapse in good judgment, and&#8230;<\/p>\n<p>&mdash; FireStake | Validator (@stake_fire) <a href=\"https:\/\/twitter.com\/stake_fire\/status\/1534598315441913856?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">in the process, we managed to convert $226 USD to ~$2M. We were thinking about our family&#39;s future, and not the future of our community.<\/p>\n<p>Shortly after doing so, we stressed throughout the night about how we can set things right. We\u2019re currently working with the Osmosis team&#8230;<\/p>\n<p>&mdash; FireStake | Validator (@stake_fire) <a href=\"https:\/\/twitter.com\/stake_fire\/status\/1534598316771536897?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">to return the funds as soon as possible. We\u2019re also working with the Osmosis team to encourage anyone else who took advantage of this situation to please come forward and return funds. <\/p>\n<p>You\u2019re welcome to come to us, and we can help act as a liaison. We need to make this right.<\/p>\n<p>&mdash; FireStake | Validator (@stake_fire) <a href=\"https:\/\/twitter.com\/stake_fire\/status\/1534598317950193666?ref_src=twsrc%5Etfw\">June 8, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On June 7, someone posted a Reddit thread that was later deleted by the forum&#8217;s moderator. The thread contained a serious claim \u2014 the Osmosis network had a bug that allowed liquidity providers to earn an extra 50% when adding and withdrawing liquidity. Osmosis (OSMO) is a blockchain in the Cosmos ecosystem that offers a [&hellip;]<\/p>\n","protected":false},"author":1342,"featured_media":242092,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[76799,16041],"tags":[],"post_folder":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.9 (Yoast SEO v21.9.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug<\/title>\n<meta name=\"description\" content=\"Attackers exploited a bug, that allowed users to gain 50% more tokens while adding and withdrawing liquidity on Osmosis.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug\" \/>\n<meta property=\"og:description\" content=\"Attackers exploited a bug, that allowed users to gain 50% more tokens while adding and withdrawing liquidity on Osmosis.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/\" \/>\n<meta property=\"og:site_name\" content=\"CryptoSlate\" \/>\n<meta property=\"article:published_time\" content=\"2022-06-09T00:05:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-09T09:31:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/06\/osmosis-cover.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Monica Noronha\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:site\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Monica Noronha\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/\"},\"author\":{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/author\/monica-noronha\/#person\",\"name\":\"Monica Noronha\",\"url\":\"https:\/\/cryptoslate.com\/author\/monica-noronha\/\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/author\/monica-noronha\/\"},\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cryptoslate.com\/author\/monica-noronha\/#authorimage\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-300x300.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-300x300.jpg\",\"caption\":\"Monica Noronha\"},\"jobTitle\":\"Journalist\",\"description\":\"Monica first started reading about crypto in 2020 and kept going deeper and deeper down the rabbit hole. While she is always skeptical of new projects, she e...\",\"worksFor\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},\"headline\":\"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug\",\"datePublished\":\"2022-06-09T00:05:00+00:00\",\"dateModified\":\"2022-06-09T09:31:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/\"},\"wordCount\":502,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"articleSection\":[\"Crime\",\"Hacks\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#respond\"]}],\"copyrightYear\":\"2022\",\"copyrightHolder\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/\",\"url\":\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/\",\"name\":\"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/#website\"},\"datePublished\":\"2022-06-09T00:05:00+00:00\",\"dateModified\":\"2022-06-09T09:31:15+00:00\",\"description\":\"Attackers exploited a bug, that allowed users to gain 50% more tokens while adding and withdrawing liquidity on Osmosis.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptoslate.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptoslate.com\/#website\",\"url\":\"https:\/\/cryptoslate.com\/\",\"name\":\"CryptoSlate\",\"description\":\"Cryptocurrency News and Real-time Coin Data\",\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"NewsMediaOrganization\",\"@id\":\"https:\/\/cryptoslate.com\/#organization\",\"name\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"CryptoSlate\"},\"image\":{\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/cryptoslate\",\"https:\/\/www.instagram.com\/cryptoslate\",\"https:\/\/www.linkedin.com\/company\/cryptoslate\",\"https:\/\/www.youtube.com\/c\/cryptoslate\",\"https:\/\/cryptoslate.substack.com\",\"https:\/\/t.me\/cryptoslatenews\",\"https:\/\/www.crunchbase.com\/organization\/cryptoslate\",\"https:\/\/iq.wiki\/wiki\/cryptoslate\",\"https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ\",\"https:\/\/muckrack.com\/media-outlet\/cryptoslate\",\"https:\/\/www.tiktok.com\/@cryptoslatenews\"],\"publishingPrinciples\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"ownershipFundingInfo\":\"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/\",\"correctionsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"ethicsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"foundingDate\":\"2017-08-04\",\"founder\":[{\"@type\":\"Person\",\"name\":\"Nate Whitehill\"},{\"@type\":\"Person\",\"name\":\"Matthew Blancarte\"}],\"contactPoint\":[{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\/\/cryptoslate.com\/contact\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"sales\",\"url\":\"https:\/\/cryptoslate.com\/advertising\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"newsroom\",\"url\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"email\":\"tips@cryptoslate.com\",\"availableLanguage\":\"en-US\"}],\"masthead\":\"https:\/\/cryptoslate.com\/about\/#masthead\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/ccff8c32a1793336dd8383751b1d5586\",\"name\":\"Monica Noronha\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-150x150.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-150x150.jpg\",\"caption\":\"Monica Noronha\"},\"description\":\"Monica first started reading about crypto in 2020 and kept going deeper and deeper down the rabbit hole. While she is always skeptical of new projects, she earnestly believes blockchain and the crypto industry can bring relief to some of the most pressing problems of our time, including financial inequality and transparency. She is a voracious reader and her love for books is only rivalled by her fondness for food.\",\"url\":\"https:\/\/cryptoslate.com\/author\/monica-noronha\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug","description":"Attackers exploited a bug, that allowed users to gain 50% more tokens while adding and withdrawing liquidity on Osmosis.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/","og_locale":"en_US","og_type":"article","og_title":"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug","og_description":"Attackers exploited a bug, that allowed users to gain 50% more tokens while adding and withdrawing liquidity on Osmosis.","og_url":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/","og_site_name":"CryptoSlate","article_published_time":"2022-06-09T00:05:00+00:00","article_modified_time":"2022-06-09T09:31:15+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/06\/osmosis-cover.jpg","type":"image\/jpeg"}],"author":"Monica Noronha","twitter_card":"summary_large_image","twitter_creator":"@cryptoslate","twitter_site":"@cryptoslate","twitter_misc":{"Written by":"Monica Noronha","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#article","isPartOf":{"@id":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/"},"author":{"@type":"Person","@id":"https:\/\/cryptoslate.com\/author\/monica-noronha\/#person","name":"Monica Noronha","url":"https:\/\/cryptoslate.com\/author\/monica-noronha\/","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/author\/monica-noronha\/"},"image":{"@type":"ImageObject","@id":"https:\/\/cryptoslate.com\/author\/monica-noronha\/#authorimage","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-300x300.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-300x300.jpg","caption":"Monica Noronha"},"jobTitle":"Journalist","description":"Monica first started reading about crypto in 2020 and kept going deeper and deeper down the rabbit hole. While she is always skeptical of new projects, she e...","worksFor":{"@id":"https:\/\/cryptoslate.com\/#organization"}},"headline":"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug","datePublished":"2022-06-09T00:05:00+00:00","dateModified":"2022-06-09T09:31:15+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/"},"wordCount":502,"commentCount":0,"publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"articleSection":["Crime","Hacks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#respond"]}],"copyrightYear":"2022","copyrightHolder":{"@id":"https:\/\/cryptoslate.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/","url":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/","name":"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug","isPartOf":{"@id":"https:\/\/cryptoslate.com\/#website"},"datePublished":"2022-06-09T00:05:00+00:00","dateModified":"2022-06-09T09:31:15+00:00","description":"Attackers exploited a bug, that allowed users to gain 50% more tokens while adding and withdrawing liquidity on Osmosis.","breadcrumb":{"@id":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cryptoslate.com\/attackers-drain-5-million-from-osmosis-firestake-validator-admits-to-exploiting-lp-bug\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptoslate.com\/"},{"@type":"ListItem","position":2,"name":"Attackers drain $5M from Osmosis; FireStake Validator admits to exploiting LP bug"}]},{"@type":"WebSite","@id":"https:\/\/cryptoslate.com\/#website","url":"https:\/\/cryptoslate.com\/","name":"CryptoSlate","description":"Cryptocurrency News and Real-time Coin Data","publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"inLanguage":"en-US"},{"@type":"NewsMediaOrganization","@id":"https:\/\/cryptoslate.com\/#organization","name":"CryptoSlate","url":"https:\/\/cryptoslate.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","width":1000,"height":1000,"caption":"CryptoSlate"},"image":{"@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/cryptoslate","https:\/\/www.instagram.com\/cryptoslate","https:\/\/www.linkedin.com\/company\/cryptoslate","https:\/\/www.youtube.com\/c\/cryptoslate","https:\/\/cryptoslate.substack.com","https:\/\/t.me\/cryptoslatenews","https:\/\/www.crunchbase.com\/organization\/cryptoslate","https:\/\/iq.wiki\/wiki\/cryptoslate","https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ","https:\/\/muckrack.com\/media-outlet\/cryptoslate","https:\/\/www.tiktok.com\/@cryptoslatenews"],"publishingPrinciples":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","ownershipFundingInfo":"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/","correctionsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","ethicsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","foundingDate":"2017-08-04","founder":[{"@type":"Person","name":"Nate Whitehill"},{"@type":"Person","name":"Matthew Blancarte"}],"contactPoint":[{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/cryptoslate.com\/contact\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"sales","url":"https:\/\/cryptoslate.com\/advertising\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"newsroom","url":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","email":"tips@cryptoslate.com","availableLanguage":"en-US"}],"masthead":"https:\/\/cryptoslate.com\/about\/#masthead"},{"@type":"Person","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/ccff8c32a1793336dd8383751b1d5586","name":"Monica Noronha","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-150x150.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/05\/monica-noronha-avatar-150x150.jpg","caption":"Monica Noronha"},"description":"Monica first started reading about crypto in 2020 and kept going deeper and deeper down the rabbit hole. While she is always skeptical of new projects, she earnestly believes blockchain and the crypto industry can bring relief to some of the most pressing problems of our time, including financial inequality and transparency. She is a voracious reader and her love for books is only rivalled by her fondness for food.","url":"https:\/\/cryptoslate.com\/author\/monica-noronha\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/242041"}],"collection":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/users\/1342"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/comments?post=242041"}],"version-history":[{"count":9,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/242041\/revisions"}],"predecessor-version":[{"id":242158,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/242041\/revisions\/242158"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media\/242092"}],"wp:attachment":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media?parent=242041"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/categories?post=242041"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/tags?post=242041"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/post_folder?post=242041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}