How Someone Borrowed $1.6M With $70 Worth of Collateral: The Tender.Fi Exploit

0

[ad_1]

The hacker who stole $1.59 million worth of crypto assets from Arbitrum-based decentralized finance (DeFi) lending platform Tender.fi has returned nearly all the funds, keeping roughly $97,000 as a bounty reward.

Tender.fi was exploited on the morning of March 7, with the project’s official Twitter handle confirming the incident in a tweet a few minutes later.

Tender.fi Exploited for $1.59 Million

According to the tweet, Tender.fi disclosed that it had noticed and was looking into an “unusual amount” of loans. The platform also paused its lending service during the investigation.

On-chain data showed that the attacker exploited an oracle glitch. The bug allowed the hacker to borrow up to $1.59 million in ether (ETH) tokens with a deposit of one GMX token worth $71 as collateral.

After the exploit, the hacker left an on-chain message for Tender.fi, saying, “It looks like your oracle was misconfigured. contact me to sort this out.” This shows that the exploiter is a white hat hacker.

A few hours later, Tender.fi disclosed that it had contacted the attacker to negotiate and discuss the terms of a bounty agreement.

“The whitehat has made contact over debank and we are currently in discussions on how to remedy this situation. We will update you with more information when we have it,” the protocol said.

Hacker Keeps $97k as Bounty

Seven hours later, the protocol revealed that it had agreed with the hacker and the funds would be returned.

About an hour later, the hacker returned $1.49 million and kept $96,500 as a bounty. Both Tender.fi and blockchain security firm PeckShield confirmed the transaction.

SPECIAL OFFER (Sponsored)
Binance Free $100 (Exclusive): Use this link to register and receive $100 free and 10% off fees on Binance Futures first month (terms).

PrimeXBT Special Offer: Use this link to register & enter POTATO50 code to receive up to $7,000 on your deposits.

[ad_2]

Source link

Leave A Reply

Your email address will not be published.

bitcoin
Bitcoin (BTC) $ 78,005.00
ethereum
Ethereum (ETH) $ 2,432.08
tether
Tether (USDT) $ 0.999807
bnb
BNB (BNB) $ 687.27
xrp
XRP (XRP) $ 1.37
usd-coin
USDC (USDC) $ 0.999826
solana
Solana (SOL) $ 102.35
tron
TRON (TRX) $ 0.336011
hyperliquid
Hyperliquid (HYPE) $ 80.36
staked-ether
Lido Staked Ether (STETH) $ 2,265.05
figure-heloc
Figure Heloc (FIGR_HELOC) $ 1.00
zcash
Zcash (ZEC) $ 838.34
dogecoin
Dogecoin (DOGE) $ 0.082528
rain
Rain (RAIN) $ 0.016675
usds
USDS (USDS) $ 0.999682
monero
Monero (XMR) $ 484.66
leo-token
LEO Token (LEO) $ 9.63
wrapped-steth
Wrapped stETH (WSTETH) $ 2,779.67
whitebit
WhiteBIT Coin (WBT) $ 71.82
chainlink
Chainlink (LINK) $ 11.22
wrapped-bitcoin
Wrapped Bitcoin (WBTC) $ 76,243.00
cardano
Cardano (ADA) $ 0.194706
binance-bridged-usdt-bnb-smart-chain
Binance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 0.998762
stellar
Stellar (XLM) $ 0.175646
wrapped-beacon-eth
Wrapped Beacon ETH (WBETH) $ 2,466.93
bitcoin-cash
Bitcoin Cash (BCH) $ 244.88
dai
Dai (DAI) $ 0.999752
canton-network
Canton (CC) $ 0.115982
wrapped-eeth
Wrapped eETH (WEETH) $ 2,465.31
usd1-wlfi
USD1 (USD1) $ 0.999496
ethena-usde
Ethena USDe (USDE) $ 0.999798
susds
sUSDS (SUSDS) $ 1.08
litecoin
Litecoin (LTC) $ 48.40
the-open-network
Gram (prev. Toncoin) (GRAM) $ 1.34
global-dollar
Global Dollar (USDG) $ 1.00
coinbase-wrapped-btc
Coinbase Wrapped BTC (CBBTC) $ 76,366.00
uniswap
Uniswap (UNI) $ 5.22
hedera-hashgraph
Hedera (HBAR) $ 0.073949
avalanche-2
Avalanche (AVAX) $ 7.16
weth
WETH (WETH) $ 2,268.37
shiba-inu
Shiba Inu (SHIB) $ 0.000005
sui
Sui (SUI) $ 0.718359
blackrock-usd-institutional-digital-liquidity-fund
BlackRock USD Institutional Digital Liquidity Fund (BUIDL) $ 1.00
usdt0
USDT0 (USDT0) $ 0.998824
paypal-usd
PayPal USD (PYUSD) $ 0.999799
crypto-com-chain
Cronos (CRO) $ 0.057444
hashnote-usyc
Circle USYC (USYC) $ 1.14
tether-gold
Tether Gold (XAUT) $ 4,455.70
memecore
MemeCore (M) $ 1.09
near
NEAR Protocol (NEAR) $ 1.86
Shares