Following the Ankr attack: The vulnerability has been fixed and the user losses have been fully reimbursed

一周前 Ankr 检测到黑客攻击，导致其流动押注 Token aBNBc 被过度铸造，并在去中心化交易平台快速兑换为其他 Token。攻击发生后，Ankr 团队在几个小时内修补了漏洞，并部署 1500 万美元的初始恢复基金，以补偿受 aBNBc 漏洞影响的流动性提供商、贷方和 DeFi 协议用户。

Overview of Measures

After announcing the recovery strategy on its blog and official social media channels, Ankr has taken several measures and fully compensated users for the losses they suffered as a result of the bug.

The compensation program is conducted in several phases, taking snapshots of the addresses of users who held aBNBc and aBNBb at 08:43:18 Beijing time on December 2, 2022 (block height: 23545403) and act swiftly to reimburse all legitimate and affected aBNBc and aBNBb holders.

So far, Ankr has airdropped ankrBNB and BNB to the wallet addresses of aBNBc and aBNBb at the time of snapshot via smart contracts and liquidity pools. It is understood that the team is working closely with multiple DeFi protocols to ensure the safety and best interests of its community.

Re-stabilized HAY prices

On December 8th, Ankr purchased 6,843,323 of 17,747,582 HAY's accumulated bad debts on the decentralized trading platform, successfully stabilizing HAY price and pushing HAY/BUSD to $0.98.

On December 13, Ankr destroyed 6,000,000 HAY, the first of the Helio bad debt destruction sites. Immediately after the incident, the Helio team said it would buy back the excess HAY and send it to the destruction site. The total value of Helio Protocol locked up before the incident was approximately $90 million, and Helio had already bought back $3 million worth of HAY bad debt in the open market.

Airdrop ankrBNB to affected DeFi users

On 9 December, Ankr held the wallet address of aBNBc and aBNBb when ankrBNB was airdropped into the snapshot via a smart contract of multiple DeFi protocols. Agreements for airdrops include:

Ellipsis Finance

PancakeSwap

Beefy Finance

ApeSwap

ACryptoS

Wombat

Wombex

Magpie

Quoll

Airdrop BNB to the affected LP

On December 12, Ankr airdropped the BNB via the aBNBc or aBNBb liquidity pool to the wallet address holding the BNB. The address is:

ACryptoS ASCI Farm: 18.57922911707609861 BNB

ACryptoS LP: 0.312655746961921 BNB

ApeSwap LP: 192.73227886323606338 BNB

Ellipsis LP Beefy Vault: 829.820502618376604417 BNB

Ellipsis LP DotDot Farm: 332.017235831474294796 BNB

Ellipsis LP Farm: 17.327942433773631424 BNB

Ellipsis LP: 9.987203105242974679 BNB

Kalmy vault: 52.996829992 BNB

Izumi LP: 509.783825632276009070 BNB

PancakeSwap LP Beefy Vault: 697.936888689457446913 BNB

PancakeSwap Farm: 6,225.408642285559266733 BNB

Airdrop ankrBNB to the lost address

Ankr held the lost wallet address of aBNBc and aBNBb when ankrBNB was airdropped into the snapshot via a smart contract with the following protocols:

Izumi

DotDot Finance

Kalmy

Unlock ankrBNB transfers

New airdropped ankrBNB transfers will be unlocked after the aBNBc and aBNBb transactions are stopped and the migration to the new ankrBNB is completed.

Compensation for Wombat stkBNB LP

Ankr reached a bilateral agreement with pStake to airdrop 2,654.352 ankrBNB and 681.051 stkBNB, which will partially cover the loss of the stkBNB liquidity provider on Wombat. The nature of the decentralized exchange's hybrid liquidity pool makes it difficult to estimate user losses. Currently, Ankr and Wombat's management team have reached an agreement on adequate compensation.

100% coverage of Wombat BNB LP

Ankr will provide 100% BNB Wombat LP, estimated at ** 14,407.155BNB (by Christmas at the latest).

Closing Remarks

It is understood that the Ankr team is working 24/7 and will further assess individual cases that were not initially considered on a case-by-case basis to maximise compensation for the losses suffered by users as a result of the attack. The main criterion is to protect users who are not malicious at the time or after the attack. Malicious arbitrageurs who exploit the aBNBc vulnerability will not be included in the recovery plan.

Welcome to join the official BlockBeats community:

Telegram Subscription Group: https://t.me/theblockbeats

Telegram Discussion Group: https://t.me/BlockBeats_App

Official Twitter Account: https://twitter.com/BlockBeatsAsia