ACryptoS Vault Exploit Results in $665,429 Loss
ACryptoS experienced a vault exploit affecting 77 vaults across five chains, resulting in a loss of approximately $665,000. The exploit was due to a missing input validation check in the depositMulti function.
ACryptoS, a DeFi yield aggregator, suffered a significant vault exploit caused by a missing input validation check in the depositMulti function. This vulnerability allowed attackers to deposit a minimal single-token amount, which enabled them to mint the majority of vault shares and subsequently withdraw a proportional share of both tokens. The incident impacted 77 vaults across five chains: Arbitrum, BSC, Polygon, Base, and Optimism.
The total losses from this exploit are reported to be around $665,000. In response to the incident, ACryptoS has disabled deposits while keeping withdrawals open for users. The project has also announced a 10% bounty for whitehat hackers who can assist in returning the funds.
Due to a lack of resources, ACryptoS has stated that it will be deprecated and has urged users to withdraw their funds as soon as possible. The exploit highlights the importance of input validation in smart contract functions to prevent similar incidents in the future.