SlowMist Team: Resupply Attacker Steals Assets through Interest Rate Surge Vulnerability, Hacker's Gas Comes from Tornado Cash

Blockbeats
Yesterday

BlockBeats News, June 27th, SlowMist founder Yuxian stated that the decentralized stablecoin protocol Resupply was exploited by an attacker through a interest rate inflation vulnerability to steal assets. The attacker triggered price inflation by donating to the new treasury's Controller contract, causing the exchangeRate to become 0, bypassing the collateral check. Ultimately, the attacker was able to borrow a significant amount of reUSD with only 1 wei of collateral. The hacker has since converted the stolen funds to ETH, valued at approximately over $9.5 million. The hacker's Gas came from Tornado Cash.

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10