$90 Million Hack of Terra’s Mirror Protocol Went Unnoticed for Seven Months
DailyCoin
Published May 31, 2022 08:00AM ET
Updated May 31, 2022 08:30AM ET
$90 Million Hack of Terra’s Mirror Protocol Went Unnoticed for Seven Months
The frequency of DeFi hacks has made them almost commonplace in the cryptoverse. However, what is certainly unusual is DeFi protocol exploits worth $90 million going unnoticed for seven months – and yet, that is the story of Mirror Protocol.
$90 Million Hack Goes Unnoticed for Seven Months
Mirror Protocol is a decentralized application on the Terra chain that allows for the creation of digital synthetics which track the price of real-world assets.
On May 17th, community members discovered a bug in the Mirror Protocol’s code that allowed a hacker to gradually siphon as much as $90 million, starting from October 8th, 2021.
According to a user under the alias of “FatMan“, the bug allowed the hacker to unlock other users’ collateral on Mirror Protocol, and withdraw it for themselves.
The bug in Mirror’s code has been exploited “hundreds of times” since 2021, allowing the hacker to suck $89,706,164.03 out from the protocol.
On-chain data indeed confirms that the hacker unlocked UST funds in the Mirror protocol multiple within the same transaction, paying only about $17.54 to do so.
Mirror Protocol Suffers Another Hack
Just days after the discovery, the DeFi protocol suffered a further attack on May 30th.
According to reports, the latest hack was caused by an error in the configuration of its price oracles, leading to the attacker taking advantage of a mismatched price between the old LUNC token, and the new LUNA token.
The attack was made possible due to the fact that the Terra nodes were running on outdated oracle software. According to the Chainlink community member who spotted the attack, the hacker drained upwards of $2 million from the protocol.
On the Flipside
- The bug was quietly fixed by Mirror Protocol developers on May 9th, without any official communication to the community that the code had been exploited.
Why You Should Care
While this is certainly not the first DeFi exploit in history, it is by far the longest it has taken for one to be reported. The pressure continues to pile on for Terra.
To get a grasp of how DeFi works, read:
Introduction to Decentralized Finance (DeFi): A Comprehensive Guide
To find out how Terra is performing, check out:
Terra (LUNA) Tanks 70% Just Hours After the Terra 2.0 Mainnet Goes Live
Continue reading on DailyCoin
Get The News You Want
Written By: DailyCoin
Trading in financial instruments and/or cryptocurrencies involves high risks including the risk of losing some, or all, of your investment amount, and may not be suitable for all investors. Prices of cryptocurrencies are extremely volatile and may be affected by external factors such as financial, regulatory or political events. Trading on margin increases the financial risks.
Before deciding to trade in financial instrument or cryptocurrencies you should be fully informed of the risks and costs associated with trading the financial markets, carefully consider your investment objectives, level of experience, and risk appetite, and seek professional advice where needed.
Fusion Media would like to remind you that the data contained in this website is not necessarily real-time nor accurate. The data and prices on the website are not necessarily provided by any market or exchange, but may be provided by market makers, and so prices may not be accurate and may differ from the actual price at any given market, meaning prices are indicative and not appropriate for trading purposes. Fusion Media and any provider of the data contained in this website will not accept liability for any loss or damage as a result of your trading, or your reliance on the information contained within this website.
It is prohibited to use, store, reproduce, display, modify, transmit or distribute the data contained in this website without the explicit prior written permission of Fusion Media and/or the data provider. All intellectual property rights are reserved by the providers and/or the exchange providing the data contained in this website.
Fusion Media may be compensated by the advertisers that appear on the website, based on your interaction with the advertisements or advertisers.