Curve DAO Tokens Suffer Millions In Hack Ahead Of White Hat Rescue Bid

Bitcoinist2023-08-01 tarihinde yayınlandı2023-08-01 tarihinde güncellendi

Özet

Curve DAO faced a significant setback as millions of CRV tokens were pilfered just moments before a white hat rescue...

Curve DAO faced a significant setback as millions of CRV tokens were pilfered just moments before a white hat rescue operation aimed at securing the funds, as revealed by blockchain data and Curve contributor Banteg.
According to a report, approximately 7 million CRV tokens and $14 million worth of wrapped ether (WETH) were lost during the exploit. The breach occurred within the CRV/ETH pool on Curve Finance, a prominent decentralized exchange (DEX) renowned for its streamlined stablecoin trading capabilities. 
The platform features a diverse array of pools that facilitate trading between various tokens, primarily focusing on stablecoins while accommodating other digital assets.
Curve DAO Faces Vulnerability Impacting Multiple Pools
Curve DAO has been struck by a critical vulnerability that has repercussions across various pools, stemming from a bug found in earlier versions of the Vyper programming language. 
“crv/eth pool drained minutes before a white hack operation,” Banteg wrote on Twitter, shedding light on the unfortunate incident.
crv/eth pool drained minutes before a whitehack operation :(https://t.co/rhALBzkTEi
— banteg (@bantg) July 30, 2023
The Curve DAO situation has drawn security analysts’ attention, with BlockSec revealing that the renowned cryptocurrency exchange, Binance, funded the wallet employed in the attack. This revelation has raised concerns about the potential risks lurking in the DeFi ecosystem.
Vyper, in response to the issue, has identified the specific versions prone to the malfunctioning reentrancy locks—0.2.15, 0.2.16, and 0.3.0. Projects relying on these vulnerable versions have been urged to contact Vyper for further assistance urgently.
PSA: Vyper versions 0.2.15, 0.2.16 and 0.3.0 are vulnerable to malfunctioning reentrancy locks. The investigation is ongoing but any project relying on these versions should immediately reach out to us.
— Vyper (@vyperlang) July 30, 2023

Curve DAO Breach: Unveiling The Flaw
As security firm Ancilia probes deeper into the situation, the full scope of the vulnerability comes to light. According to their analysis, many contracts were exposed to potential risks.
Specifically, 136 contracts relied on Vyper 0.2.15 with reentrant protection, 98 contracts were built using Vyper 0.2.16, and 226 contracts employed Vyper 0.3.0.
We did a fast run on github.
136 contracts found compiled with vyper 0.2.15 and used reentrant protection;
98 contracts found with 0.2.16 version
226 contracts found with 0.3.0 version
— Ancilia, Inc. (@AnciliaInc) July 30, 2023

As the investigation progresses, the root cause of the vulnerability has been unveiled, shedding light on the extent of the risk. Specific versions of the Vyper compiler were found to need proper implementation of the reentrancy guard. 


Market cap of cryptocurrencies reached $1.148 trillion on the daily chart today: TradingView.com
This critical oversight allows for the simultaneous execution of multiple functions, bypassing the intended locking mechanism in affected contracts. As a result, malicious actors could unleash reentrancy attacks capable of draining all funds from vulnerable contracts.


Source: Coingecko
Meanwhile, Curve DAO (CRV) price is in red in all timeframes, losing nearly 13% in the last 24 hours. In the last week, the token has shed 14% of its value, figures from crypto market tracker Coingecko shows.

İlgili Okumalar

U.S. July PCE Price Index Rises 3.7% YoY, Giving Fed Room to Stand Pat

U.S. consumer spending unexpectedly stalled in July, while key inflation measures showed mild trends, providing more data support for the Federal Reserve's stance to keep interest rates unchanged. The Commerce Department reported that the July Personal Consumption Expenditures (PCE) price index rose 0.2% month-over-month, with the year-over-year increase holding at 3.7%. The core PCE index, excluding food and energy, also rose 0.2% monthly, with the annual rate steady at 3.3%, meeting expectations. However, inflation-adjusted real personal consumption expenditure was flat for the month. The data indicates signs of cooling in the U.S. economy after strong expansion earlier in the summer. For Fed officials, this supports the argument for pausing rate hikes, although core PCE remains well above the central bank's 2% target, suggesting inflationary pressures have not fully subsided. Market focus now shifts to the annual Jackson Hole symposium, where investors await Fed Chair Wash's speech for clues on the policy path amid persistent inflation. Concurrently, a separate report showed the U.S. second-quarter GDP growth was unchanged from the initial estimate, but with details pointing to stronger consumer spending, adding some support to the economic outlook.

marsbit13 dk önce

U.S. July PCE Price Index Rises 3.7% YoY, Giving Fed Room to Stand Pat

marsbit13 dk önce

Former Nvidia AI Director Overturns Transformer, Creates 5 Trillion-Context Physical AI That Can Simulate the Entire Universe

Former NVIDIA AI Director Anima Anandkumar and her co-founder Benedikt Jenik have unveiled a groundbreaking "Physical AI" model through their startup, Accelerated Understanding. This model departs entirely from the dominant Transformer architecture, instead utilizing "Neural Operators" to directly understand and simulate physical phenomena in their full 4D spacetime (3D space + time). It achieves a staggering inference-time context window of over 5 trillion tokens—reportedly 5 million times larger than current top LLMs—enabling it to generate complete 4D trajectories of complex physical systems in a single, one-shot inference without subsampling or chunking. The model, pre-trained with 1 trillion parameters and scaled to 35 trillion in experiments, functions as a universal physics simulator capable of handling diverse domains from weather to materials science. It establishes a "simulate → improve → simulate" loop for reality validation. The founders notably turned down a lavish offer from Jeff Bezos's Project Prometheus, which included 35% equity, a $2M salary, and over $20B in committed funding. Industry speculation points to NVIDIA CEO Jensen Huang, who previously championed Anandkumar's work, as a potential key supporter behind the scenes. This development signals a paradigm shift from language/image-centric AI to physics-first intelligence.

marsbit15 dk önce

Former Nvidia AI Director Overturns Transformer, Creates 5 Trillion-Context Physical AI That Can Simulate the Entire Universe

marsbit15 dk önce

NVIDIA Earnings Report Quick Read: Quarterly Revenue on the Verge of Breaking the $100 Billion Mark, Can Still Grow 70% Next Year

NVIDIA Q2 FY2027 Earnings Report: Record Revenue Nears $100 Billion, Projects 70% Growth for Next Year NVIDIA reported exceptional Q2 FY2027 results, with revenue reaching $96.22 billion (up 106% YoY) and non-GAAP net income of $53.95 billion (up 118% YoY). Q3 revenue guidance of $108 billion signals the company's imminent entry into a "quarterly $100 billion revenue" era. The most striking projection came from the CFO, who forecasted approximately 70% revenue growth for FY2028, significantly above Wall Street's 45% expectation, and notably stated this outlook excludes any data center revenue from China. The data center segment remained the core driver, generating $89 billion (up 117% YoY), representing over 90% of total revenue. Growth continues to be primarily fueled by capital expenditures from hyperscale cloud providers like Amazon, Microsoft, Google, and Meta. A key product milestone was the confirmation that the Vera Rubin platform has entered full-scale production and begun shipments. Management stated that every 1 GW of Vera Rubin compute deployed represents a roughly $40 billion revenue opportunity, with the platform expected to contribute about 20% of data center revenue in Q3. CEO Jensen Huang noted its ramp-up is the fastest in company history, providing confidence for the strong future outlook. Management emphasized that AI demand is not slowing but accelerating and broadening into new areas like inference, enterprise AI, and robotics. The primary constraint on growth is now supply, not demand. Huang indicated that without supply limitations, the FY2028 outlook would be "much higher." Bottlenecks include components like HBM, advanced packaging, and data center power. In response, NVIDIA is expanding its role, collaborating with financial firms to mobilize over $500 billion in third-party capital for AI infrastructure and securing key resources like land and power. Crossing the $100 billion quarterly revenue mark represents a new scale for NVIDIA, while the 70% growth projection for next year suggests it may just be the starting point for the next phase.

Odaily星球日报18 dk önce

NVIDIA Earnings Report Quick Read: Quarterly Revenue on the Verge of Breaking the $100 Billion Mark, Can Still Grow 70% Next Year

Odaily星球日报18 dk önce

Why Isn't Bitcoin's Higher Ownership Rate Than Gold Among Americans Considered a Victory?

Bitcoin adoption among American adults has surpassed gold holdings, with 18.6% of U.S. adults holding Bitcoin compared to 10.8% holding gold, according to a July study. The U.S. holds roughly 42% of the global Bitcoin supply, and a proposed bill could direct the Treasury to study accumulating Bitcoin as a reserve asset. Macro factors, including the U.S. Treasury's increased bond buyback program, weakened the dollar and boosted both gold and Bitcoin as alternative assets. The Bitcoin-to-gold price ratio is highlighted as a leading indicator. While Bitcoin's adoption rate is significant, its total market value remains far below gold's, indicating a shift in trajectory rather than a parity in institutional allocation. Key signals to watch include sustained dollar weakness, potential expansion of Treasury buybacks, and a continued rise in the Bitcoin-to-gold ratio, which would suggest capital rotation from gold to Bitcoin.

marsbit18 dk önce

Why Isn't Bitcoin's Higher Ownership Rate Than Gold Among Americans Considered a Victory?

marsbit18 dk önce

İşlemler

Spot
活动图片