Ethereum DeFi protocol Hope Lend drained after exploit

11 months ago

The protocol, which had 526 Ether successful full worth locked, was emptied successful an onslaught connected Oct. 18.

Ethereum DeFi protocol Hope Lend drained aft  exploit

Ethereum decentralized concern (DeFi) protocol Hope Lend has adjacent to zero assets near successful its protocol aft a devastating hack.

According to aggregate blockchain information firms, connected Oct. 18, 2 individuals, a frontrunner who bushed the archetypal hacker aft discovering the exploit, and the archetypal hacker itself, stole a combined 526 Ether (ETH) from Hope Lend worthy $825,357 astatine the clip of publication. "The palmy attacker gained 264 ETH and paid a 263 ETH bribe to an ETH validator," wrote CertiK. 

Hope.money, the DeFi protocol's developer, presented a antithetic mentation of the story. In its X thread, developers assertion that a azygous hacker ran disconnected with 526 Ether worthy of users' funds, paying 263.91 successful bribes to a validator allegedly managed by Lido Finance, yet netting a nett of 264.08 ETH. Hope.money unit said:

"It is important to stress that each protocols deployed connected http://Hope.money are autarkic and volition not interaction the assorted different products and protocols presently unrecorded connected the platform, including HopeCard、HopeSwap and $HOPE. We are committed to ensuring the extortion of the affected users' rights, and the corresponding funds stay secure."

Two days prior, DeFi aggregator DeFiLlama announced it would statesman tracking Hope Lend's astute contracts for information curation. At the clip of publication, Hope Lend had nary noticeable assets left within the protocol. While developers did not authorities the crushed for the incident, on-chain sleuth Spreek claimed that the hack "seems to beryllium related to WBTC [wrapped Bitcoin] decimals and rounding, akin to the Wise Lending hack recently."

On October 18, 2023, astatine 11:48:59 AM +UTC, the HopeLend protocol fell unfortunate to a hacker attack. It is important to enactment that the hacker did not nett from this attack.

The onslaught resulted successful a nonaccomplishment of astir 528 ETH, retired of which 263.91 ETH were bribed by the frontrunner…

— Hope.money⚡️ (@Hope_money_) October 18, 2023

Magazine: Elon Musk streams, Amazon partners with Immutable, MetalCore preview

View source