Rocket Suffers $287K Loss from Exploit of Dormant Market
An attacker exploited a dormant perpetual market on Rocket, resulting in a loss of $287,000. The incident involved creating fake profits through self-trading and led to the suspension of platform activities.
An attacker exploited a dormant, illiquid perpetual market on Rocket by using a burner account to post orders at artificially inflated prices. This self-trading generated fake profits on one account while bankrupting the burner account. The profitable account subsequently withdrew approximately $287,000 in positive profit and loss from the Bridge, leading to a socialized loss across the platform.
As a result of the exploit, Rocket paused deposits, withdrawals, and trading activities to address the situation. The mechanism of the attack involved manipulating market prices and exploiting the liquidity conditions of the perpetual market, which allowed the attacker to create an illusion of profitability.
The incident highlights vulnerabilities in the trading mechanisms of the platform, particularly in illiquid markets. The specific blockchain used in this incident is not stated, which limits the ability to trace the transactions on-chain.