PublicAML

Secured Finance Ethereum Lending Market Drained

Secured Finance's Ethereum lending market suffered a loss of $104,000 due to a manipulation attack. Attackers used flash loans and self-trades to inflate collateral values.

Secured Finance's Ethereum lending market was compromised when attackers executed a strategy involving flash loans and self-trades. This manipulation allowed them to alter the current-block order-book average price, which inflated fake lend positions into valid collateral. As a result, approximately $104,000 was extracted from the platform.

The attack's mechanism involved creating artificial lending positions that appeared legitimate, enabling the attackers to withdraw funds based on these inflated values. An initial attempt by the original attacker to withdraw a large amount of Wrapped Bitcoin (WBTC) was unsuccessful due to insufficient gas, leading to a frontrunner taking about 0.9 WBTC instead.

This incident highlights the vulnerabilities in the lending market's price manipulation defenses. The use of Ethereum as the underlying chain means that all transactions and manipulations can be traced on the blockchain, although specific addresses involved in the attack were not disclosed in the description.

Sources

Share:XTelegramLinkedIn
Secured Finance Ethereum Lending Market Drained | PublicAML