Ola Finance’s DeFi Lending Protocol Gets Exploited for $3.6 Million

An open-source, decentralised financial system called Ola Finance has been the victim of a re-entry assault that resulted in the loss of $3.6 million in cryptocurrency.
As Ola Finance summarised the attack and revealed that the stolen protocol value was around $4.67M in ETH, BTC, and FUSE pricing. There were 216,964 USDC, 507,216 BUSD, 200,000 fUSD, 550.45 WETH, 26.25 WBTC, and 1.24 million FUSE stolen by the hackers.

We will soon be publishing an official report detailing the exploit that occurred on the @voltfinance Lending Network and the plan for recourse.
Thank you to @peckshield for providing swift coverage and helping us analyze the root of the exploit.
Read Primer 🧵: https://t.co/UDU10C2YSa
— Ola.finance (@ola_finance) March 31, 2022

About the re-entrancy attack
PeckShield, a blockchain security startup, released a detailed analysis and diagnosis of the vulnerability.
In a re-entrancy attack, a threat actor exploited flaws in Ola Finance’s smart contracts to give a loan based on bogus collateral to the protocol’s decentralised lending platform.
According to the security company. Tornado Cash, an anonymous transfer mechanism, was used by the threat actor to withdraw cash.
Loans were withdrawn from Ola Finance’s decentralised lending platform when the cash from Tornado Cash was moved to the Fuse network, on which Ola Finance operates. 
Using the built-in callback methods of ERC677 and ERC777 tokens, the hack was made possible because of the incompatibility between the Compound fork and these tokens.
Axie Infinity’s Ronin sidechain was attacked for $625 million in a previous assault on decentralised finance (DeFi) systems, making this the latest in a series of attacks. 
After a number of high-profile hacks on DeFi systems, several experts have called for an enhanced examination of smart contract programming.
Hackers Have Their Eyes on DeFi
The $625 million Ronin network attack by Axie Infinity was just a few days before the Ola Finance hack. Ronin has been hacked to the tune of 173,600 ETH and 25.5 million USDC, making it one of DeFi’s biggest ever hacks.
Since the Ola Finance hack, reentrancy attacks have been utilised in several high-profile breaches. A reentry fault and a flash loan vulnerability were used to steal over $11 million from Agave and Hundred Finance on March 16, according to FXEmpire.
DeFi thefts are becoming more widespread, despite the fact that Ola Finance’s intrusion is less than those previously reported.
***

Avatar

Related Articles

- Advertisement -

Latest Articles

bitcoin
Bitcoin (BTC) $ 17,027.08
ethereum
Ethereum (ETH) $ 1,282.96
tether
Tether (USDT) $ 1.00
bnb
BNB (BNB) $ 291.33
usd-coin
USD Coin (USDC) $ 1.00
binance-usd
Binance USD (BUSD) $ 1.00
xrp
XRP (XRP) $ 0.393898
dogecoin
Dogecoin (DOGE) $ 0.099825
cardano
Cardano (ADA) $ 0.317254
matic-network
Polygon (MATIC) $ 0.927291
polkadot
Polkadot (DOT) $ 5.57
staked-ether
Lido Staked Ether (STETH) $ 1,269.50
okb
OKB (OKB) $ 22.08
litecoin
Litecoin (LTC) $ 76.93
shiba-inu
Shiba Inu (SHIB) $ 0.000009
dai
Dai (DAI) $ 1.00
tron
TRON (TRX) $ 0.054586
solana
Solana (SOL) $ 13.61
uniswap
Uniswap (UNI) $ 5.96
avalanche-2
Avalanche (AVAX) $ 13.23
chainlink
Chainlink (LINK) $ 7.63
wrapped-bitcoin
Wrapped Bitcoin (WBTC) $ 17,042.76
leo-token
LEO Token (LEO) $ 3.78
cosmos
Cosmos Hub (ATOM) $ 10.35
ethereum-classic
Ethereum Classic (ETC) $ 19.74
the-open-network
The Open Network (TON) $ 1.81
monero
Monero (XMR) $ 144.95
stellar
Stellar (XLM) $ 0.088338
bitcoin-cash
Bitcoin Cash (BCH) $ 110.71
quant-network
Quant (QNT) $ 123.15
algorand
Algorand (ALGO) $ 0.245908
crypto-com-chain
Cronos (CRO) $ 0.065038
filecoin
Filecoin (FIL) $ 4.46
near
NEAR Protocol (NEAR) $ 1.75
apecoin
ApeCoin (APE) $ 3.89
vechain
VeChain (VET) $ 0.019307
hedera-hashgraph
Hedera (HBAR) $ 0.049041
internet-computer
Internet Computer (ICP) $ 4.23
flow
Flow (FLOW) $ 1.11
terra-luna
Terra Luna Classic (LUNC) $ 0.000181
elrond-erd-2
MultiversX (Elrond) (EGLD) $ 43.45
frax
Frax (FRAX) $ 1.00
eos
EOS (EOS) $ 0.937192
trust-wallet-token
Trust Wallet (TWT) $ 2.42
the-sandbox
The Sandbox (SAND) $ 0.603389
tezos
Tezos (XTZ) $ 1.03
theta-token
Theta Network (THETA) $ 0.922320
aave
Aave (AAVE) $ 64.42
huobi-token
Huobi (HT) $ 6.85
chiliz
Chiliz (CHZ) $ 0.165381