[ad_1] <br><div><div><p><a target="_blank" href="https://www.coindesk.com/learn/what-is-defi/" rel="noopener">Decentralized-finance </a>(DeFi) lending protocol Euler Finance has suffered an exploit that resulted in virtually $200 million being misplaced.</p></div></div><div><div><p>The losses occurred over 4 transactions in dai (DAI), wrapped bitcoin (<a target="_blank" href="https://www.coindesk.com/price/wrapped-bitcoin/" rel="noopener">WBTC</a>), staked ether (sETH) and USDC, based on <a target="_blank" href="https://twitter.com/BlockSecTeam/status/1635210758064832512?s=20" rel="noopener">smart contract auditor BlockSec</a>. The attacker used a flash mortgage to conduct the assault.</p></div></div><div><div><p>"We're conscious and our crew is at the moment working with safety professionals and legislation enforcement," Euler Finance <a target="_blank" href="https://twitter.com/eulerfinance/status/1635218198042918918" rel="noopener">said in a tweet</a>. "We are going to launch additional info as quickly as we've it."</p></div></div><div><div><p>Flash loans enable DeFi customers to borrow thousands and thousands of {dollars} towards zero collateral. This isn’t crypto magic or free cash: The mortgage should be repaid earlier than the transaction ends or the sensible contract reverses the transaction – as if the mortgage by no means existed. They're a preferred approach for attackers to achieve funds to conduct exploits on decentralized methods. In April 2022, the Beanstalk stablecoin protocol was drained of $182 million, and in Could 2022, greater than $1.2 million was taken from Inverse Finance.</p></div></div><div><div><p>Euler's attackers used the mortgage to briefly trick the protocol into falsely assuming it held a low quantity of eToken, a collateral token issued by Euler based mostly on whichever token is deposited on the protocol. A separate dToken, or debt token, can be issued by Euler in order that an on-chain liquidation is robotically triggered when the quantity of dTokens exceeds the quantity of eTokens held on the platform.</p></div></div><div><div><p>The attacker took out over $30 million price of dai stablecoin utilizing flash loans from DeFi protocols Balancer and Aave, on-chain knowledge reveals. Some $20 million of that was despatched to Euler, on which the attacker obtained $19.5 million price of eDAI.</p></div></div><div><div><p>The attacker then borrowed 10 occasions the deposited quantity from Euler, receiving 195.6 million eDAI and 200 million dDAI. The attacker repaid a part of the preliminary debt utilizing the remaining funds, tricking the protocol into falsely assuming it owed extra to depositors than it held.</p></div></div><div><div><p>DeFi exploits – by which hackers make use of the open-source nature of a platform's code to achieve unauthorized entry to its belongings – are one of many foremost issues plaguing the business.</p></div></div><div><div><p><i><b>UPDATE (March 13, 10:10 UTC): </b></i><i>Provides remark from Euler Finance and knowledge on the character of exploits and their prevalence within the DeFi business</i></p></div></div><div><div><p><i><b>UPDATE (March 13, 12:15 UTC): </b></i><i>Updates quantity taken in headline, first paragraph; provides assault vector in second paragraph, assault particulars beginning in fifth.</i></p></div></div><script async src="//platform.twitter.com/widgets.js" charset="utf-8"></script> <br>[ad_2] <br><a href="https://www.coindesk.com/business/2023/03/13/euler-defi-protocol-exploited-for-nearly-185m/?outputType=amp">Source link </a>