Ola Finance’s DeFi Lending Protocol Gets Exploited for $3.6 Million

An open-source, decentralised financial system called Ola Finance has been the victim of a re-entry assault that resulted in the loss of $3.6 million in cryptocurrency.
As Ola Finance summarised the attack and revealed that the stolen protocol value was around $4.67M in ETH, BTC, and FUSE pricing. There were 216,964 USDC, 507,216 BUSD, 200,000 fUSD, 550.45 WETH, 26.25 WBTC, and 1.24 million FUSE stolen by the hackers.

We will soon be publishing an official report detailing the exploit that occurred on the @voltfinance Lending Network and the plan for recourse.
Thank you to @peckshield for providing swift coverage and helping us analyze the root of the exploit.
Read Primer 🧵: https://t.co/UDU10C2YSa
— Ola.finance (@ola_finance) March 31, 2022

About the re-entrancy attack
PeckShield, a blockchain security startup, released a detailed analysis and diagnosis of the vulnerability.
In a re-entrancy attack, a threat actor exploited flaws in Ola Finance’s smart contracts to give a loan based on bogus collateral to the protocol’s decentralised lending platform.
According to the security company. Tornado Cash, an anonymous transfer mechanism, was used by the threat actor to withdraw cash.
Loans were withdrawn from Ola Finance’s decentralised lending platform when the cash from Tornado Cash was moved to the Fuse network, on which Ola Finance operates. 
Using the built-in callback methods of ERC677 and ERC777 tokens, the hack was made possible because of the incompatibility between the Compound fork and these tokens.
Axie Infinity’s Ronin sidechain was attacked for $625 million in a previous assault on decentralised finance (DeFi) systems, making this the latest in a series of attacks. 
After a number of high-profile hacks on DeFi systems, several experts have called for an enhanced examination of smart contract programming.
Hackers Have Their Eyes on DeFi
The $625 million Ronin network attack by Axie Infinity was just a few days before the Ola Finance hack. Ronin has been hacked to the tune of 173,600 ETH and 25.5 million USDC, making it one of DeFi’s biggest ever hacks.
Since the Ola Finance hack, reentrancy attacks have been utilised in several high-profile breaches. A reentry fault and a flash loan vulnerability were used to steal over $11 million from Agave and Hundred Finance on March 16, according to FXEmpire.
DeFi thefts are becoming more widespread, despite the fact that Ola Finance’s intrusion is less than those previously reported.
***

Avatar

Related Articles

- Advertisement -

Latest Articles

bitcoin
Bitcoin (BTC) $ 27,168.28
ethereum
Ethereum (ETH) $ 1,897.12
tether
Tether (USDT) $ 1.00
bnb
BNB (BNB) $ 307.29
usd-coin
USD Coin (USDC) $ 1.00
xrp
XRP (XRP) $ 0.516613
staked-ether
Lido Staked Ether (STETH) $ 1,895.43
cardano
Cardano (ADA) $ 0.376552
dogecoin
Dogecoin (DOGE) $ 0.072234
solana
Solana (SOL) $ 21.29
matic-network
Polygon (MATIC) $ 0.907433
litecoin
Litecoin (LTC) $ 95.20
tron
TRON (TRX) $ 0.076509
polkadot
Polkadot (DOT) $ 5.27
binance-usd
Binance USD (BUSD) $ 1.00
shiba-inu
Shiba Inu (SHIB) $ 0.000009
avalanche-2
Avalanche (AVAX) $ 14.47
dai
Dai (DAI) $ 1.00
wrapped-bitcoin
Wrapped Bitcoin (WBTC) $ 27,186.28
uniswap
Uniswap (UNI) $ 5.08
leo-token
LEO Token (LEO) $ 3.60
chainlink
Chainlink (LINK) $ 6.42
cosmos
Cosmos Hub (ATOM) $ 10.60
okb
OKB (OKB) $ 46.16
monero
Monero (XMR) $ 146.40
the-open-network
Toncoin (TON) $ 1.77
ethereum-classic
Ethereum Classic (ETC) $ 18.06
stellar
Stellar (XLM) $ 0.092080
bitcoin-cash
Bitcoin Cash (BCH) $ 114.58
filecoin
Filecoin (FIL) $ 4.94
internet-computer
Internet Computer (ICP) $ 4.83
true-usd
TrueUSD (TUSD) $ 0.999700
lido-dao
Lido DAO (LDO) $ 2.31
aptos
Aptos (APT) $ 9.10
quant-network
Quant (QNT) $ 118.13
hedera-hashgraph
Hedera (HBAR) $ 0.051104
arbitrum
Arbitrum (ARB) $ 1.25
crypto-com-chain
Cronos (CRO) $ 0.059529
near
NEAR Protocol (NEAR) $ 1.60
vechain
VeChain (VET) $ 0.020041
the-graph
The Graph (GRT) $ 0.132963
apecoin
ApeCoin (APE) $ 3.11
algorand
Algorand (ALGO) $ 0.151937
the-sandbox
The Sandbox (SAND) $ 0.564355
paxos-standard
Pax Dollar (USDP) $ 0.999888
eos
EOS (EOS) $ 0.906768
edgecoin-2
Edgecoin (EDGT) $ 1.00
frax
Frax (FRAX) $ 1.00
render-token
Render (RNDR) $ 2.63
elrond-erd-2
MultiversX (EGLD) $ 37.67