DeFi lending protocol bZx suffered another attack last night, the second in seven months.
This time, faulty code was blamed for an exploit that allowed hackers to duplicate assets, or increase their iTokens balance without the appropriate collateral.
Reports are circulating that hackers stole cryptocurrencies worth $8 million. But Anton Burkov, Co-founder of 1inch Exchange, analyzed the relevant DeFi explorer, removing duplicate items, as well as bZx “admin drainages”, to conclude those reports are greatly exaggerated.
According to Burkov, the amount lost to the duplication exploit is closer to $1.7 million. Further analysis carried out by Burkov pinpointed the exploit to nine transactions on the iETH lending token, worth approximately 4.7k Ethereum in total.
“We found 9 exploiting transactions on $iETH lending token with 101778 $iETH tokens duplicated (worth ~4.7K $ETH) // @DuneAnalytics”
<img data-lazyloaded="1" src="https://dailytruthreport.com/wp-content/uploads/2020/09/k06a_tweet_1305254388085260288.jpg" width="1920" height="1080" class="aligncenter wp-image-438375 size-full" alt="DeFi protocol bZx lost $1.7 million in latest exploit" data-srcset="https://dailytruthreport.com/wp-content/uploads/2020/09/k06a_tweet_1305254388085260288.jpg 1920w, https://dailytruthreport.com/wp-content/uploads/2020/09/k06a_tweet_1305254388085260288-460×259-1.jpg 460w, https://dailytruthreport.com/wp-content/uploads/2020/09/k06a_tweet_1305254388085260288-860×484-1.jpg 860w, https://dailytruthreport.com/wp-content/uploads/2020/09/k06a_tweet_1305254388085260288-768×432-1.jpg