Avalanche-based lending protocol Nereus Finance was hacked and $371K in USD Coin (USDC) was stolen. The hacker deployed a custom smart contract taking advantage of a $51 million flash loan from Aave.
CertiK, a blockchain cybersecurity firm, was among the first to detect the hack on September 6. CertiK at the time said that the exploit impacted liquidity pools relating to decentralized exchange Trader Joe and automated market maker Curve Finance on Nereus
But Curve Finance responded on September 7 arguing that maybe CertiK was referring to ‘assets impacted’ rather than protocols impacted since only Nereus Finance and its assets seemed affected by the exploit.
Post-mortem of the exploit
On September 7, Nereus Finance released a comprehensive post-mortem of the exploit saying that the hacker was able to deploy a custom smart contract targeting a $51 million flash loan from Aave to manipulate the price of AVAX/USDC Trader Joe LP pool for a single block.
Consequently, the hacker was able to mint 998,000 NXUSD, Nereus’ native token, using collateral worth $508,000. The hacker then swapped the minted NXUSD into different assets through several liquidity pools and managed to walk away with a net profit of $371,406 after the flash loan was returned.
While the hacker made a profit, the exploit created $508,000 worth of NXUSD ‘bad debt.’
Nereus was however quick to arrest the situation by developing a mitigation plan, notifying law enforcement, and then liquidating and pausing the exploited JLP pool. The NXUSD bad debt was paid off using the protocol’s treasury.
Nereus also noted that a similar exploit will not be possible in future since the protocol will amend its audit and security practices. Nereus noted:
“While this exploit is a bad incident — it’s not uncommon for protocols to face these types of battle tests.”
As of the time of writing, the Nereus team was still trying to identify the hacker by tracking the funds. It has offered a 20% White Hat reward for the return of the funds with no questions asked.
$371K in USDC stolen in an Avalanche flash loan exploit
coinjournalPublicado em 2022-09-08Última atualização em 2022-09-08
Resumo
Avalanche-based lending protocol Nereus Finance was hacked and $371K in USD Coin (USDC) was stolen.
Criptomoedas em alta
Leituras Relacionadas
Trading
Artigos em Destaque
Como comprar AVAX
Bem-vindo à HTX.com!Tornámos a compra de Avalanche (AVAX) simples e conveniente.Segue o nosso guia passo a passo para iniciar a tua jornada no mundo das criptos.Passo 1: cria a tua conta HTXUtiliza o teu e-mail ou número de telefone para te inscreveres numa conta gratuita na HTX.Desfruta de um processo de inscrição sem complicações e desbloqueia todas as funcionalidades.Obter a minha contaPasso 2: vai para Comprar Cripto e escolhe o teu método de pagamentoCartão de crédito/débito: usa o teu visa ou mastercard para comprar Avalanche (AVAX) instantaneamente.Saldo: usa os fundos da tua conta HTX para transacionar sem problemas.Terceiros: adicionamos métodos de pagamento populares, como Google Pay e Apple Pay, para aumentar a conveniência.P2P: transaciona diretamente com outros utilizadores na HTX.Mercado de balcão (OTC): oferecemos serviços personalizados e taxas de câmbio competitivas para os traders.Passo 3: armazena teu Avalanche (AVAX)Depois de comprar o teu Avalanche (AVAX), armazena-o na tua conta HTX.Alternativamente, podes enviá-lo para outro lugar através de transferência blockchain ou usá-lo para transacionar outras criptomoedas.Passo 4: transaciona Avalanche (AVAX)Transaciona facilmente Avalanche (AVAX) no mercado à vista da HTX.Acede simplesmente à tua conta, seleciona o teu par de trading, executa as tuas transações e monitoriza em tempo real.Oferecemos uma experiência de fácil utilização tanto para principiantes como para traders experientes.
636 Visualizações TotaisPublicado em {updateTime}Atualizado em 2026.06.02

Discussões





