Bug in Bedrock Protocol Allowed uniBTC to ETH Swaps

user avatar

by Giorgi Kostiuk

2 years ago


The staking protocol Bedrock reported a bug involving uniBTC tokens, which allowed users to exchange them for ETH.

Vulnerability Discovery

On September 27, Bedrock announced that the team is aware of the issue and is handling it. Users were assured that the remaining funds are safe. The total loss is estimated to be approximately $2 million in digital assets.

This function was likely leftover from the uniETH implementation.Platform User

Bedrock's Response

Bedrock assured that most of the losses were from decentralized exchange liquidity pools, and the underlying wrapped Bitcoin tokens and standard Bitcoin held in reserves were secure. The team stated that no extra actions are required from users and that a post-mortem report would be released soon.

History of Bedrock Protocol

Launched in February 2023 by the Singapore-based blockchain company RockX, the Bedrock protocol was designed to make liquid staking attractive for institutional investors by prioritizing compliance with KYC and AML regulations. According to DefiLlama, Bedrock is ranked as the eighth-largest liquid staking protocol with over $240 million in total value locked.

Bedrock continues to work on mitigating the impacts of the vulnerability while assuring users that their funds are safe. A full post-mortem report will be released soon.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

CME Group to Launch Bitcoin Cash and Uniswap Futures on October 19

CME Group has scheduled the introduction of Bitcoin Cash and Uniswap futures for October 19, providing institutional traders with more cryptocurrency markets.

user avatarRajesh Kumar

Ethereum's Glamsterdam Upgrade Scheduled for Hoodi Test Network

Ethereum's next major upgrade, Glamsterdam, is set to activate on the Hoodi test network on October 26, marking a significant step in testing changes to block production and execution costs.

user avatarMiguel Rodriguez

International Crackdown on West African Scam Networks Results in 28 Arrests

An international effort against West African scam networks has led to 28 arrests and the removal of over 37 million accounts linked to fraudulent activity.

user avatarLuis Flores

Stablecoin Payment Transactions Surge Despite Flat Supply

A new report reveals a significant increase in stablecoin payment transactions, contrasting with stagnant supply levels.

user avatarArif Mukhtar

MARA Holdings Transfers 1,000 BTC to Exchanges Amid Market Scrutiny

MARA Holdings has transferred approximately 1,000 BTC to Binance and Gate over the past five days, raising questions about its treasury movements.

user avatarDavid Robinson

CryptoBilis Case Exposes Vulnerabilities in Hardware Wallets

The CryptoBilis case reveals vulnerabilities in hardware wallets, leading to $90 million in losses due to tampered devices.

user avatarMaria Gutierrez

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.