Flamincome Exploited for $345,900 Due to Unsafe Asset Accounting
Flamincome, associated with Flamingo Finance, suffered an exploit resulting in a loss of $345,900. The incident involved unsafe asset accounting and valuation techniques.
Flamincome, which operates on the Ethereum chain, was exploited due to vulnerabilities in its asset accounting and valuation methods. The attacker utilized a flash loan of approximately $18 million USDT to manipulate the system. By injecting USDP/3CRV LP into the Strategy and overvaluing it through Curve’s get_virtual_price() function, the attacker inflated the VaultYUSDT share price significantly.
As a result of this manipulation, the attacker was able to redeem real Aave aUSDT liquidity, ultimately securing a profit of around $345,900. This incident highlights the risks associated with improper asset valuation and the potential for exploitation in decentralized finance protocols.
The exploit's impact on the Ethereum chain means that the transactions can be traced through the blockchain. However, the specific addresses involved in the exploit were not disclosed in the source description. The incident serves as a reminder of the importance of secure asset management practices in the DeFi space.