DeFi protocol token NFD crashes by 99% after a flash loan attack

CointelegraphPublicado em 2022-09-08Última atualização em 2022-09-08

Resumo

New Free DAO, a decentralized finance (DeFi) protocol, faced a series of flash loan attacks on Sept. 8.

New Free DAO, a decentralized finance (DeFi) protocol, faced a series of flash loan attacks on Sept. 8, resulting in a reported loss of $1.25 million. The price of the native token has dropped by 99% in the wake of the attack.
Unlike normal loans, several DeFi protocols offer flash loans that allow users to borrow large amounts of assets without upfront collateral deposits. The only condition is that the loan must be returned in a single transaction within a set time period. However, this feature is often exploited by malicious adversaries to gather large amounts of assets to launch costly exploitations targeting DeFi protocols.
Blockchain security firm Certik alerted the crypto community on Thursday about the 99% price slippage of the NFD token due to a flash loan attack. The attacker reportedly deployed an unverified contract and called the function “addMember()” to add itself as a member. The attacker later executed three flash loan attacks with the assistance of the unverified contract.
New Free Dao - $NFD was exploited via flash loan attack gaining the attacker 4481 WBNB (approx. ~$1.25M) causing the token to slip in price 99%.
The attacker has connections to Neorder - $N3DR attack from 4 months ago where they took 930 BNB at the time. pic.twitter.com/5Rcht3YiIK
— CertiK Alert (@CertiKAlert) September 8, 2022
The attacker first borrowed 250 WBNB worth $69,825 via flash loan and swapped all of them for the native token NFD. The contract was then used to create multiple attack contracts to claim airdrop rewards repeatedly. The attacker then swapped all the airdrop rewards for WBNB benefiting 4481 BNB.
Out of the 4481 BNB, the attacker returned the borrowed loan (250 BNB) and swapped 2,000 BNB for 550,000 BSC-USD. Later, the attacker moved 400 BNB to the popular coin mixer service Tornado Cash.

Fund Movement From NFD Attacker Wallet to Tornado Cash Source: BSC ScanCertik also notified that the hacker behind the flash loan attack on NFD was related to those who exploited Neorder (N3DR) in May earlier this year. Later, another blockchain security firm Beosin told Cointelegraph that the attackers behind both the exploits could be the same.
Beosin also highlighted another vulnerability with the NFD protocol that could be further used for another type of flash loan attack. The security firm said that the price could be manipulated since they are calculated “using the balance of USDT in the pair, so it may lead to flash loan attack if exploited.”
3/ Although unrelated to this attack, we also find another vulnerability in the $NFD contract that may lead to price manipulation. pic.twitter.com/kKvx4hRdE4
— Beosin Alert (@BeosinAlert) September 8, 2022
Flash loan attacks have been increasingly popular among hackers due to the low risk, low cost and high reward factors. On Sept. 7, Avalanche-based lending protocol Nereus Finance became a victim of a crafty flash loan attack resulting in a loss of $371,000 in USDC. Earlier in June, Inverse Finance lost $1.2 million in another flash loan attack.

Leituras Relacionadas

Bitcoin Must Hold $60K Or Risk Major Breakdown, TradingView Analyst Warns

Bitcoin has reached a critical juncture around the $60,000 level, which analysts view as a major technical and psychological support zone. According to a TradingView analysis, a successful hold above this demand area could pave the way for a recovery toward $81,000. However, the warning is clear: a decisive and sustained break below $60,000 would invalidate the bullish outlook, likely triggering stop losses and a deeper market correction. The current setup is described as a binary test—maintaining support keeps the recovery narrative alive, while losing it would signal a shift toward a more significant downturn.

bitcoinistHá 5m

Bitcoin Must Hold $60K Or Risk Major Breakdown, TradingView Analyst Warns

bitcoinistHá 5m

Venus Protocol Integrates Tokenized Stocks As Lending Collateral On BNB Chain

Venus Protocol now allows tokenized stocks from companies like Apple, Tesla, and Microsoft to be used as borrowing collateral on BNB Chain. This integration brings a key real-world asset (RWA) use case into DeFi lending. Users can deposit these tokenized equities, which are described as 1:1 backed by real shares held by regulated custodians, into isolated pools to borrow stablecoins or BNB without selling their underlying positions. This move expands DeFi lending beyond crypto-native assets, resembling traditional margin finance. It highlights BNB Chain's competition for RWA activity and aims to attract more stable liquidity. However, tokenized stocks introduce different risks, including dependency on off-chain custodians and challenges with collateral valuation due to differing market hours between traditional and on-chain trading. While not an immediate price catalyst, this development is significant within broader crypto trends like compliance pressure and RWA tokenization. Success will depend on growing liquidity, reliable custody, robust price oracles, and clear rules for redemptions and liquidations.

bitcoinistHá 1h

Venus Protocol Integrates Tokenized Stocks As Lending Collateral On BNB Chain

bitcoinistHá 1h

The Impossible Trilemma Is Basically a Pseudo-Problem

The article argues that the core limitation of blockchain technology is not the scalability trilemma, but its fundamental lack of privacy, which acts as a barrier to institutional capital. It defines blockchain as a slow, expensive, shared computer whose primary value is "permissionlessness" (no administrator) and verifiable trust. While this is ideal for native financial assets like stable币, which now process trillions, two critical flaws remain for mainstream adoption: regulatory legitimacy and a default transparency that leaks all financial activity. The author contends that transparency is not a feature but a tax, quantified through MEV extraction, making the public ledger unusable for serious institutions. However, modern cryptography, specifically zero-knowledge proofs, now offers a solution: "provable privacy." This allows users to prove compliance (e.g., solvency, KYC) without revealing underlying data. This fusion of privacy and auditability resolves the transparency-compliant privacy-compliance dichotomy, enabling a purely upgraded system where transactions are verified but not broadcasted. Closing these flaws is presented as the essential bridge to onboard the next wave of trillions in capital.

marsbitHá 11h

The Impossible Trilemma Is Basically a Pseudo-Problem

marsbitHá 11h

The "Impossible Triad" Is Fundamentally a Pseudo-Problem

The article argues that blockchain's fundamental limitation is not the scalability trilemma (decentralization, scalability, security), which has been largely solved, but the lack of **privacy** and, until recently, clear **legitimacy**. Blockchain is described as a slow, expensive, globally shared computer whose core value is censorship resistance and verifiability. While ideal for native digital assets like money (e.g., stablecoins), its default transparency acts as a **tax**, exposing all transactions and enabling MEV extraction, which deters serious institutional capital. Simultaneously, its permissionless nature created regulatory ambiguity. The piece contends that **privacy** is the missing critical feature. It rejects the false choice between total transparency and complete anonymity. Modern cryptography (like zero-knowledge proofs) enables **compliant privacy**: users can prove facts (solvency, KYC status, compliance) without revealing the underlying sensitive data (specific holdings, identities). This preserves auditability for regulators and eliminates the leak of financial information. With recent regulatory progress (e.g., the GENIUS Act) addressing legitimacy, adding default, provably compliant privacy becomes a pure upgrade. It transforms blockchain from a costly, public ledger into a confidential settlement layer, finally bridging the gap to mainstream institutional and individual adoption of on-chain finance.

链捕手Há 11h

The "Impossible Triad" Is Fundamentally a Pseudo-Problem

链捕手Há 11h

Optical Chips: Collective Capacity Expansion

The global optical chip industry is experiencing a massive wave of expansion driven by surging AI data center demand. Major players across the US, Japan, Europe, and China are aggressively investing to ramp up production capacity. In the US, Coherent is expanding its 6-inch Indium Phosphide (InP) semiconductor fab in Texas, supported by CHIPS Act funding and a $2 billion strategic investment from NVIDIA. Lumentum is building a new factory for InP optical devices, and Nokia is scaling its advanced photonic chip packaging and testing capabilities. NVIDIA's investments aim to secure future supply of critical lasers and optical interconnect products for AI infrastructure. Japan's JX Advanced Metals, a leading InP substrate supplier, plans a multi-billion yen investment to increase its capacity 7-10 times, strengthening its grip on the crucial upstream materials market. In Europe, IQE and Tower Semiconductor settled a patent dispute and signed a multi-year InP epitaxial wafer supply agreement, highlighting that next-generation silicon photonics platforms will integrate high-performance InP components. STMicroelectronics and Sivers Semiconductors are also expanding silicon photonics production and partnerships. China is rapidly building out its domestic supply chain. Dongshan Precision's subsidiary, Source Photonics, announced a $12 billion project to expand optical chip and module production. Companies like Sanan Optoelectronics and Yunnan Germanium are scaling up InP chip manufacturing and substrate production, moving towards vertical integration from materials to modules. While debate continues around the exact future architecture—whether CPO (Co-Packaged Optics), NPO, or pluggables will dominate—analysts like Morgan Stanley argue the underlying driver is unchangeable: the explosive growth in bandwidth demand. This will inevitably increase the volume of optical engines, lasers, and related content per GPU, regardless of the final technical path. The competition for "more light" in the AI era has intensified into a global, full-chain capacity race.

marsbitHá 13h