[ad_1] <br><div><p>Decentralized finance (DeFi) protocol Ankr stated it would reimburse the customers impacted by the $5 million exploit that occurred on its platform earlier Friday.</p><p>"We'll take a snapshot and reissue ankrBNB to all legitimate aBNBc holders earlier than the exploit. The ankrBNB token will proceed to be redeemable, whereas aBNBc and aBNBb will now not be redeemable," Ankr stated in a tweet after the exploit.</p><p>Ankr, which known as itself the primary "node-as-a-service" platform, had suffered the multimillion-dollar exploit as a result of a bug in its code that allowed for limitless minting of its token.</p><p>After minting the quadrillions of aBNBc token, the <a target="_blank" href="https://twitter.com/lookonchain/status/1598499855412121600" rel="nofollow noopener" data-ylk="slk:attacker was able to swap 20 trillion of them" class="link ">attacker was able to swap 20 trillion of them </a>for BNB, then transfer these to <a target="_blank" href="https://www.coindesk.com/layer2/2022/09/29/how-to-deal-with-tornado-cash-without-using-sanctions/" rel="nofollow noopener" data-ylk="slk:crypto mixer Tornado Cash" class="link ">crypto mixer Tornado Cash</a>. The attacker then swapped the BNB tokens for five million USDC.</p><p>As a result of the hacker virtually fully drained the aBNBc liquidity swimming pools on PancakeSwap and ApeSwap, the token misplaced almost 99% of its worth, in keeping with <a target="_blank" href="https://www.coingecko.com/en/coins/ankr-reward-bearing-stake-bnb" rel="nofollow noopener" data-ylk="slk:CoinGecko data" class="link ">CoinGecko data</a>.</p><p>In accordance with <a target="_blank" href="https://twitter.com/peckshield/status/1598508401755144196" rel="nofollow noopener" data-ylk="slk:security research firm PeckShield" class="link ">security research firm PeckShield</a>, the code behind the Ankr contract permits any consumer to mint a vast quantity of the protocol’s reward-bearing staking tokens with none type of verification. This allowed the attacker to mint six quadrillion of the aBNBc token.</p><p><a target="_blank" href="https://twitter.com/ankr/status/1598503332477280256" rel="nofollow noopener" data-ylk="slk:Ankr tweeted" class="link ">Ankr tweeted</a> that each one staked belongings inside the protocol are at present secure. Binance CEO Changpeng Zhao <a target="_blank" href="https://twitter.com/cz_binance/status/1598575867311132673?s=20&amp;t=H6GQEqnB1TFovGJMcGVNTA" rel="nofollow noopener" data-ylk="slk:tweeted that his exchange" class="link ">tweeted that his exchange</a> had frozen $3 million that had been despatched to his alternate by the hackers.</p><figure class="caas-figure"><div class="caas-figure-with-pb" style="max-height: 600px"><div><div class="caas-img-container caas-img-loader" style="padding-bottom:75%;"><img class="caas-img caas-lazy has-preview" alt="Ankr on Nansen. (Nansen)" src="https://s.yimg.com/ny/api/res/1.2/evWgm9bHbgE6C_Hw0IMl0A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMA--/https://media.zenfs.com/en/coindesk_75/58e147fa905942fe9b2bb821408d695f"/><noscript><img alt="Ankr on Nansen. (Nansen)" src="https://s.yimg.com/ny/api/res/1.2/evWgm9bHbgE6C_Hw0IMl0A--/YXBwaWQ9aGlnaGxhbmRlcjt3PTk2MDtoPTcyMA--/https://media.zenfs.com/en/coindesk_75/58e147fa905942fe9b2bb821408d695f" class="caas-img"/></noscript></div></div></div><p><figcaption class="caption-collapse">Ankr on Nansen. (Nansen)</figcaption></p></figure><h2>Secondary exploit</h2><p><a target="_blank" href="https://twitter.com/lookonchain/status/1598535936044044294" rel="nofollow noopener" data-ylk="slk:On-chain analyst firm Lookonchain reported" class="link ">On-chain analyst firm Lookonchain reported</a> that one opportunistic dealer was capable of money in on the exploit and switch 10 BNB ($2,885) into 15.5 million BUSD. The dealer did this by benefiting from DeFi lending protocol Helio, which didn't have up-to-date pricing on aBNBc post-crash.</p><p>The dealer was additionally in a position to make use of the pre-crash pricing for aBNBc to borrow $16 million of the little-traded HAY stablecoin and convert that into BUSD. Since then, the HAY stablecoin has been tossed off its peg, hitting a low of 20 cents, and is now recovering, in keeping with CoinMarketCap, <a target="_blank" href="https://coinmarketcap.com/currencies/helio-money/" rel="nofollow noopener" data-ylk="slk:with a price of 77 cents" class="link ">with a price of 77 cents</a>.</p><p><i><b>UPDATE (Dec. 2, 07:35 UTC):</b></i><i> Added remark from Binance's CEO.</i></p><p><i><b>UPDATE (Dec. 2, 12:49 UTC)</b></i><i>: Updates headline and story to incorporate Ankr response, new particulars.</i></p></div><script async src="//platform.twitter.com/widgets.js" charset="utf-8"></script> <br>[ad_2] <br><a href="https://news.google.com/__i/rss/rd/articles/CBMiT2h0dHBzOi8vZmluYW5jZS55YWhvby5jb20vbmV3cy9kZWZpLXByb3RvY29sLWFua3ItZXhwbG9pdGVkLW92ZXItMDYwODExMzE4Lmh0bWzSAVdodHRwczovL2ZpbmFuY2UueWFob28uY29tL2FtcGh0bWwvbmV3cy9kZWZpLXByb3RvY29sLWFua3ItZXhwbG9pdGVkLW92ZXItMDYwODExMzE4Lmh0bWw?oc=5">Source link </a>