News and Analytics

0

Bugs in Fork of Gains Network Allow for 900% Profit on Trades

May 9, 2024

Two different bugs were identified in a fork of the Gains Network leveraged trading protocol that could have enabled traders to achieve a 900% profit on every trade, regardless of the token's price, as per a report from blockchain security firm Zellic dated April 19. One of the bugs was present in a past version of Gains and was promptly fixed, while the other was specific to a fork of the protocol.

Zellic notified the developers of Gains forks Gambit Trade, Holdstation Exchange, and Krav Trade regarding the vulnerability, with these teams ensuring that their protocols do not harbor such flaws. However, Zellic cautioned that other Gains forks might still be open to exploitation.

Gains Network is a suite of decentralized finance (DeFi) products on Polygon and Arbitrum, with its leveraged trading app named "gTrade." Since its establishment in May 2023, Gains Network has overseen over $25 billion in derivatives volume, the analytics platform DefiLlama reported.

Zellic uncovered that numerous prominent DeFi trading apps derive from Gains Network's core code, like Gambit Trade and Holdstation, among others. Despite finding this exploit while examining a specific fork, Zellic refrained from identifying which one it originated from.

The report underscored that Gains Network contracts enable users to open market, reversal, or momentum trade orders. A market order instantly trades an asset, regardless of the price.

In the Gains fork subject to examination, Zellic's findings revealed that setting the stop-loss price above the open price could lead to automatic profit from trades. By exploiting this flaw, an attacker could deplete the protocol's funds.

Another bug recognized by Zellic allowed for a 900% profit on sell orders, irrespective of price action. This exploit was remedied in a previous version of Gains.

Therefore, Zellic contacted the Gains forks to notify them about these security vulnerabilities and engaged with the Crypto Security Alliance to uncover potentially impacted protocols. However, there is a lingering concern that certain Gains forks might still be at risk of these exploits, endangering users' funds. Gains Network along with other platforms addressed in the report were approached by Cointelegraph for feedback but were unavailable by the article's release.

Gains Network asserts it offers the "real spot price" of listed assets and superior forex trading options compared to other platforms.

Comments

Latest analytics

Celestia: Revolution...

Celestia: Revolution in the World of Modular Blockchains

TON Wallets: a...

TON Wallets: a complete guide to use

Show more

Latest Dapp Articles

Show more

You may also like