Polygon-based DeFi protocol 0VIX has fallen victim to the latest flash loan attempt in the cryptocurrency market. Besides the $2 million loss, the price of Aavegotchi’s native token was also manipulated.
$2 million flash loan attack on this cryptocurrency platform
0VIX, a lending protocol on Polygon and Polygon zkEVM, reported losses of approximately $2 million as a result of a flash loan attack. The exploit took place via the vGHST token. Before exploiting the vulnerability, the total locked value of the protocol was $6.4 million. That figure is now down to $1.7 million as investors quickly withdraw their capital.
Officer’s Notes, an independent security researcher, said that the attackers transferred $1.4 million in USDC and $600,000 in USDT through the briding protocol Stargate Finance while attempting to transfer funds back to Ethereum and convert stablecoins to ETH. The 0VIX team has decided to temporarily halt the lending markets while investigating the matter.
After the attack, 0VIX said, “0VIX is working with security partners to look into what appears to be vGHST-related. As a result, we paused the POS and zkEVM markets. This includes pausing oToken transfers, printing and liquidations. Currently only POS is enabled. But we paused zkEVM as a precaution. We will probably be reactivated shortly.”
autopsy report
PeckShield reports that the attackers received a $6.12 million flash loan in stablecoins to manipulate the vGSHT lending pool at 0VIX.
Another blockchain security firm, Blocksec, confirmed that hackers used borrowed stablecoins to open vGSHT lending positions, and then the protocol manipulated price oracle contracts.
GHST price manipulated: rally 30%
As the chart below shows, Aavegotchi’s token GHST rose by double digits in less than 30 minutes. The price increase reached over 25% at one point. Moving sideways throughout the day, GHST quickly peaked from $1.13 to $1.41. The price is currently trading lower from the start.
What is a flash loan?
Such attacks are called price oracle manipulation attacks, which are common in DeFi circles. Attackers inflate the price of a low-liquid token like GHST by manipulating oracle contracts. It then replaces the pumped coins with other coins with ample liquidity and stable price.
cryptocoin.com As we reported, Mango Markets in Solana and bZx exchange on Ethereum and BNB Chain were hacked with the same technique. Cryptocurrency platforms lost $100 million and $55 million, respectively.
Contact us to be instantly informed about the last minute developments. twitter‘in, Facebookin and InstagramFollow and Telegram And YouTube join our channel!
Risk Disclosure: The articles and articles on Kriptokoin.com do not constitute investment advice. Bitcoin and cryptocurrencies are high-risk assets, and you should do your due diligence and do your own research before investing in these currencies. You can lose some or all of your money by investing in Bitcoin and cryptocurrencies. Remember that your transfers and transactions are at your own risk and any losses that may occur are your responsibility. Cryptokoin.com does not recommend buying or selling any cryptocurrencies or digital assets, nor is Kriptokoin.com an investment advisor. For this reason, Kriptokoin.com and the authors of the articles on the site cannot be held responsible for your investment decisions. Readers should do their own research before taking any action regarding the company, assets or services in this article.
Disclaimer: Advertisements on Kriptokoin.com are carried out through third-party advertising channels. In addition, Kriptokoin.com also includes sponsored articles and press releases on its site. For this reason, advertising links directed from Kriptokoin.com are on the site completely independent of Kriptokoin.com’s approval, and visits and pop-ups directed by advertising links are the responsibility of the user. The advertisements on Kriptokoin.com and the pages directed by the links in the sponsored articles do not bind Kriptokoin.com in any way.
Warning: Citing the news content of Kriptokoin.com and quoting by giving a link is subject to the permission of Kriptokoin.com. No content on the site can be copied, reproduced or published on any platform without permission. Legal action will be taken against those who use the code, design, text, graphics and all other content of Kriptokoin.com in violation of intellectual property law and relevant legislation.