Foresight News reports that according to SlowMist monitoring, it detected that BitBay was attacked, with losses of approximately $14,000. The root cause is that its Vault's _withdraw() transfers out the entire token balance in the contract when liquidity == 0, rather than limiting redemption according to the user's share ratio. The attacker lowered liquidity to zero through reposition(), then redeemed 1 minimum share unit and withdrew approximately 14,838.47 DAI.
SlowMist: BitBay suffered an attack, losing approximately $14,000.
Related news
SpaceX-Tesla Merger: Passive Flows ‘Hack’, Could Bring More BTC Exposure to S&P 500
▶Bitcoin Magazine SpaceX-Tesla Merger: Passive Flows ‘Hack’, Could Bring More BTC Exposure to S&P 500 Sean Hagan breaks down why a Tesla-SpaceX merger is a no-brainer, connecting p...
Liquid Network Announces Final Stages of Recovery Following Massive Hack
Bitcoin Magazine Liquid Network Announces Final Stages of Recovery Following Massive Hack One month after hackers pinched 4,000 bitcoins, the Liquid Network is up and running again...
Brooklyn DA Pulls the Plug on Crypto Scam Network
Bitcoin Magazine Brooklyn DA Pulls the Plug on Crypto Scam Network 112 servers and 241 fake sites knocked offline in one of the largest cyber takedowns ever by a local prosecutor.
A user downloaded a "fake wallet" from Huawei's official store and had 170,000 USDT stolen.
Victims of the Drift hacking incident initiated redemptions, and the $3.11 million recovery pool could only redeem about 1 cent/USD.