This week saw several major hacks in the DeFi sector, leading to millions in losses and exposing weaknesses within decentralized finance protocols.
Bedrock DeFi Hit by $2 Million Exploit
The multi-chain liquidity re-staking protocol, Bedrock, fell on a vulnerability in its uniBTC pool. Hackers took advantage of an issue in the smart contract, which allowed uniBTC to be minted at an incorrect 1:1 exchange rate with the native currency of the platform. This error allowed attackers to pull out liquidity, costing $2 million. Bedrock has informed that the BTC and wbtc reserves are still intact and the platform is working with audit teams to investigate the hack and attempt fund recovery where possible.
Truflation Hack: $5M stolen from the treasury wallets
Truflation, a decentralized inflation data provider, lost $5 million from their treasury multi-sig and personal wallets to hackers. As initially reported by on-chain investigator ZacXBT, the breach occurred due to malware that provided the attackers access to the keys and wallets critical to the website.
Onyx Hit by $3M Hack: Exploit targets decentralized protocol
Another protocol that followed the same example was Onyx, which incurred a $3.8 million loss. Hackers exploited a precision defect in the Compound V2 code to manipulate the exchange rate and increase rewards for self-liquidation. Additionally, a vulnerability in the NFTLiquidation contract increased the risk of loss. This incident highlighted the lack of robust security measures for smart contract validation.
The total losses from these incidents exceed $10 million, raising questions about the security of decentralized platforms. These breaches serve as a reminder for the DeFi community to focus on enhancing security measures.
