Partnered With:

yDAI suffers, Curve "happy" to receive windfall

Read this article in 6 Minutes

Curve is reaping the benefits of hacking yDAI vaults.

Original title: "yDAI Shouchuang Curve "happy" to collect unexpected wealth"

Original source: PeckShield

Two-level inversion? Curve is reaping the benefits of hacking yDAI vaults.

On February 5, Beijing time, Yearn Finance tweeted that the v1 yDAI vault was attacked.

Yearn Finance core developer @banteg said: "The vault was exploited, the attacker gained $2.8M and the vault lost $11M. During our investigation , policy deposits for v1 DAI, TUSD, USDC, and USDT vaults will be disabled."

PeckShield (PeckShield) found through tracking and analysis that this attack is related to The flash loan attack vulnerability that occurred on Yearn.finance's TUSD Vault disclosed by security researcher Wen-Ding Li (李文鼎) before is similar.

An "invisible hand" to curb the volatility of DeFi lending interest rates? Yearn Finance vaults are not enough insurance.

At the end of September 2020, the developers of Yearn Finance disclosed that they patched the funds that may make the yDAI, yTUSD and yUSD vaults Vulnerabilities at risk. After the same type of attack vulnerability appeared in the flash loan that appeared on TUSD Vault in November, fortunately, it was repaired quickly. After many tinkerings, it still hasn't escaped a blow.

PeckShield (PeckShield) security company has repeatedly reminded that the project party should not only make the code to the extreme, but also prevent problems before they happen. Once there is a DeFi attack If it happens, it is necessary to self-check the code and check for gaps in time.

As of now, Yearn Finance core developer banteg said that hackers have stolen 513,000 DAI and 1.7 million USDT, and the rest in CRV tokens form exists.

Aave founder Stani Kulechov said that the attack contained a complex vulnerability involving more than 160 transactions on multiple DeFi platforms. transaction, spent more than $5,000 in Gas fees.

wind Investor Julien Thevenard pointed out that of the funds stolen from the vault, more than $3 million was received by liquidity providers on the DeFi lending platform Curve.