Tender.fi White Hat Hacker Returns $1.6 Million Loot for 62.15 ETH

Decentralized finance (DeFi) protocol Tender.fi has been made whole thanks to the hacker who returned $1.6 million that were exploited from the platform earlier this week. The white hat hacker noticed a glitch in Tender.fi’s pricing oracle, which allowed them to borrow a significant amount against a modest deposit.

According to a post-mortem report published by Tender.fi earlier today, the DeFi lending protocol had upgraded its price feed to Chainlink’s price oracle on March 6, a day before the exploit. The new price feed derived the price of the GMX token from Chainlink, rather than a time-weighted average price (TWAP). The new code was reportedly audited by blockchain intelligence firm PeckShield.

However, the Chainlink price oracle had a glitch, due to which the hacker was able to deposit one GMX token worth nearly $70 at the time and borrow a whopping $1.6 million against that deposit. A decimal error in the Solidity contract caused the contract to treat the 1 GMX collateral as having more value on Tender.fi than all Bitcoin in existence.

The white hat left an on-chain message for the protocol after borrowing the huge sum which read, “It looks like your oracle was misconfigured. Contact me to sort this out.” The Tender.fi team reached out to the hacker over DeBank and negotiated repayment of the massive loan in exchange for a bounty of 62.15 ETH worth nearly $100,000 at the time.

The DeFi lending protocol took to Twitter earlier today to inform its community they have resumed all borrowing services. Tender.fi suspended the borrowing feature in light of the exploit on March 7

Comments

Post a Comment

Popular posts from this blog

BNP Paribas teams up with Bank of China to promote digital yuan usage

The partnership will enable BNP Paribas China's corporate clients to make payments using the digital yuan through an e-CNY management system. The French bank BNP Paribas is collaborating with the Bank of China (BOC) to promote China's digital currency, the digital yuan, to its corporate clients, the South China Morning Post reported.  The partnership will enable BNP Paribas China's corporate clients to connect with the BOC system, allowing users to manage their digital yuan wallets by linking them to their bank accounts, track transactions, and make payments using China's digital currency via an e-CNY management system. The e-CNY management system also promises to make it easier and more convenient for clients to use digital cash for real-time transactions. The e-CNY management system can facilitate “efficient, real-time and convenient [digital cash] practice,” BNP shared, according to The South China Morning Post.  BNP Paribas China also plans to explore the use...
Read more

VeChain Working With United Nations in Sustainability Campaign

Image
VeChain is launching a new sustainability campaign with the United Nations aiming towards the promotion of sustainability through the AWorld campaign. “We’ve just launched our Challenge Tournament in the AWorld app, the official platform in support of the United Nations ACTNOW sustainability campaign! We have some epic prizes for our eco-champions – are you ready to play?” the project tweeted. Source: Zipmex AWorld is the UN’s official platform supporting the ACTNOW campaign. The VeChain sustainability campaign pushing for individual actions on climate change and sustainability. Its partners include the University of Cambridge, the European Commission, BlackRock, Prada, and now, VeChain Also Read: VeChain : VET Secures Key US Patent For Blockchain Transactions The VeChain Blockchain network will reward participants for daily sustainability actions as part of the initiative. According to VeChain , all participants will receive an exclusive NFT, with one lucky winner rece...
Read more

5 New Countries To Join BRICS Alliance in August

Image
The next BRICS summit will be held in South Africa in August and the bloc of five nations will decide on expanding the alliance. It is reported that the BRICS expansion could occur in August making the alliance rebrand itself as BRICS+. Among the 25 countries that have applied to join the BRICS alliance, five could be allowed entry into the bloc. Their entry into the group is almost certain and the announcement of the expansion could be made at the summit. Also Read: BRICS: Saudi Arabia, Iran & Brazil Pay in Chinese Yuan, Ditch U.S. Dollar BRICS is an acronym for Brazil, Russia, India, China, and South Africa. The group is looking to take on the U.S. dollar by launching a new currency for global trade. BRICS: 5 New Countries To Join the Alliance in August Source: pakistantoday.com.pk Out of the 25 countries that formally sent their applications to join BRICS, only five could be inducted in August. The five countries likely to join the BRICS alliance are Saudi Arabia, the United Ara...
Read more