ДеФи хак од 90 милиона долара откривен седам месеци након чињенице

Mirror Protocol suffered a $90 million exploit last October, but it went unnoticed for seven months. 

Седам месеци

Mirror Protocol was hacked for almost $90 million on Terra Classic on Oct. 8, 2021, a Twitter user by the name of FatMan revealed for the first time on May 26, 2022, seven months after the attack.

Према ФатМану, који каже открио је хак „чистим случајем“, нападач је украо 89,706,164.03 долара из протокола захваљујући експлоатацији која им је омогућила да откључавају колатерал из уговора о закључавању „изнова и изнова уз мале трошкове и нула ризика“.

A look at Terra Classic on-chain data indeed открива that the attacker was able to unlock UST funds multiple times from the protocol within the same transaction, paying only about $17.54 to do so. 

Mirror Protocol is a decentralized application that allows for the creation of digital synthetics which track the price of real-world assets, such as stocks. Mirror’s core contracts were deployed on Terra Classic, but its assets are available on Ethereum and Binance Smart Chain (BSC).

The bug, which was открио by Mirror community members on May 17, had been quietly fixed by Mirror developers on May 9. The developer team had made no comment on whether the bug had already been noticed or exploited previously. 

The Mirror Protocol team has yet to make any statement about the exploit, which has prompted criticism from the community. FatMan, however, thinks there is no “compelling evidence” indicating the entity responsible for the hack was an insider.

It’s not the first time a DeFi exploit took time to discover, though this is by far the longest it has taken. It had previously taken six days for the Ronin team to realize they’d been експлоатисан за 600 милиона долара.

Откривање: У време писања, аутор овог дела је поседовао ЕТХ и неколико других криптовалута.