cryptd.in

LinkedIn alternativo per i talenti crittografici

GMX Defends Contracts After $13 Million Loss Tied to Abracadabra’s Cauldron Exploit

Prominent blockchain security firm PeckShield reported an exploit involving the GMX decentralized exchange (DEX), which has brought attention to vulnerabilities within the Abracadabra (Spell) ecosystem.

The incident, tied to Abracadabra’s cauldrons – smart contracts that facilitate DeFi operations like lending, borrowing, and liquidity provision – led to the theft of approximately 6,260 Ethereum, worth roughly $13 million.

GMX Assures Contracts Remain Secure

While the attack has drawn considerable attention, GMX was quick to clarify that its contracts were not compromised. In fact, the issue was confined to the integration between GMX V2 and Abracadabra’s cauldrons, which use GMX’s liquidity pools for their operations. The team assured the community that it was not affected by the incident and confirmed that no vulnerabilities were found within GMX’s own smart contracts.

The team further explained that the Abracadabra team, along with external security researchers, was actively investigating the breach to determine its cause and prevent future incidents. This incident is particularly noteworthy as it highlights the continued security challenges within the broader DeFi ecosystem.

It also follows a previous security breach in January 2024 when Abracadabra’s Magic Internet Money (MIM) stablecoin was exploited due to a flaw in its smart contract. The exploit led to a loss of $6.49 million.

Flash Loan Attack

Crypto researcher Weilin (William) Li stated that the CauldronV4 contract permits users to perform multiple actions, with the solvency check occurring at the end of the process. In this case, the attacker performed seven actions, five of which involved borrowing the Magic Internet Money (MIM) stablecoin, followed by calling the attack contract and initiating liquidation.

Li’s initial analysis suggests that the first action, borrowing MIM, already increased the attacker’s debt, making the liquidation (action 31) possible. This liquidation, however, was suspiciously executed in a flash loan state – where the borrower had no collateral.

He also pointed out that the attacker profited from liquidation incentives and exploited the fact that the solvency check only occurred after all actions were completed, which allowed the attacker to circumvent the system’s protections.

Il post GMX Defends Contracts After $13 Million Loss Tied to Abracadabra’s Cauldron Exploit è apparso per la prima volta su Criptopatate.


Commenti

Lascia un commento

Il tuo indirizzo e-mail non sarà pubblicato. I campi obbligatori sono contrassegnati *

Ultimi feed

Categorie più popolari

Ricerca nel sito web

Storie popolari

Tag

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElezione (1) #BinanceVsCoinbase (1) #Bitcoin (370) #BitcoinETF (3) #BitcoinFondamenti (1) #BitcoinHandling (1) #BitcoinPrezzo (5) #BitcoinPrezzoLivello (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #BitcoinTop (1) #Bitfinex (1) #Bitwise (1) #BracebridgeCapital (1) #BRC20Tokens (1) #BTCacquisizione (1) 1TP5Previsione toro (1) #BullishSentiment (1) #CMiniera cinese (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativoSalto (1) #Dogecoin (64) #DogecoinGains (1) #DogecoinVolume (1) 1TP5Corte olandese (2) #ECommerce (1) #ElSalvadorBitcoin (1) #Ethereum (62) #EthereumPain (1) #EPrezzo dell'Etere (1) #ExpertOpinion (1) #FedRateCut (1) #FiatValuta (1) #Fimpatto finanziario (1) #FinanziarioPrivacy (1) #FirmShutdown (1) #FrozenAccounts (1) 1TP5FondiIlleciti (1) #InflationData (1) 1TP5Investimento (1) 1TP5Perdita d'investimento (1) #Azienda giapponese (1) #Azione legale (1) #Impatto legale (1) #Legislazione (1) #LightningNetwork (1) #Manalisi del mercato (3) #MMonitoraggio del mercato (1) #Mprevisione di mercato (1) #Mprevisioni di mercato (1) #MProiezione di mercato (1) #MmercatoSupporto (1) #MmercatoVolatilità (1) #MCompatibile (1) #MemeCoin (5) #MemeCoins (2) #MinerProfittabilità (1) #MRiciclaggio di denaro (2) #MtGox (3) #Corea del NordCrittografia (1) #NovogratzPrevisione (1) #PriceMilestone (1) #PprezzoPrevisione (2) #PriceDomanda (1) #PrezzoAumento (1) #PcarcereSentenza (1) #QuantAnalisi (1) #RegolamentazionePressione (1) #SECAntiCrypto (1) #ShibaInu (5) #SocialBuzz (1) #T Analisi tecnica (1) #Toncoin (3) #TornadoCash (3) #TornadoCashDev (1) #TornadoCashSviluppatore (1) #UKCrypto (1) #UpsidePotenziale (1) #USCongresso (1) #WyomingLand (1) #XRPrezzo (1) #XRPupswing (1)

Link utili

Link che ho trovato utili e che volevo condividere.