Penpie loses $27 million in phishing attack

user avatar

by Giorgi Kostiuk

2 years ago

Made with AI


  1. Incident Background
  2. Funds Converted to ETH
  3. Pendle Funds Remain Safe

  4. Penpie, a decentralized finance (DeFi) protocol built upon Pendle, suffered a significant setback, losing over $27 million in a phishing attack. The platform took steps to defend funds on Pendle and Pencosystem from further attacks.

    Incident Background

    The platform released an official statement to its users, urging them to withdraw their assets as soon as possible. Additionally, all users were asked to revoke approvals to their contracts on the site to prevent further asset loss. The exploit allowed the attacker to create a malicious contract, leading to the loss of millions in user assets.

    Funds Converted to ETH

    Some of the stolen funds were converted to Ethereum (ETH). Around 1,000 ETH worth approximately $24.7 million were laundered via Tornado Cash to cover up the online trail.

    Pendle Funds Remain Safe

    On the other hand, following the incident, Pendle, while not directly attacked, took precautionary measures by temporarily halting its contract operations with Penpie. Additionally, over $105 million were actively safeguarded from further attacks. Pendle assured its users that their funds remained secure and emphasized its commitment to closely monitoring the situation.

    The phishing attack on Penpie has posed a significant challenge to the decentralized finance sector. While funds on Pendle remained secure, the platform continues to take measures to ensure the safety of its users.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

Plex Media Server Vulnerabilities Exploited for Cryptojacking

Attackers are exploiting vulnerabilities in Plex Media Server to install unauthorized cryptocurrency miners and a Linux proxy backdoor.

user avatarTomas Novak

Super League Shareholders Approve Metaplanets Bitcoin Treasury Proposal

Super League shareholders approved a proposal for Metaplanets to contribute 2,100 BTC and $25 million to a new US-listed Bitcoin treasury platform.

user avatarKaterina Papadopoulou

Sophon Sets Withdrawal Deadline Ahead of Mainnet Shutdown

Sophon has set a deadline for users to withdraw their assets by November 25 ahead of the shutdown of its standalone chain.

user avatarMaya Lundqvist

Large Hyperliquid Trader Rebuilds Ethereum Short After Significant Losses

A trader on Hyperliquid rebuilt a substantial Ethereum short position worth approximately $16 million after incurring losses of around $469,000.

user avatarLeo van der Veen

Tron Surpasses Ethereum and Solana in Blockchain Fee Revenue

Tron has generated approximately $234 million in chain revenue over the past 30 days, surpassing Ethereum and Solana.

user avatarLi Weicheng

New Reporting Requirements Proposed for Crypto Holders in France

A proposed amendment would require crypto holders to declare self-custodied assets worth over €100,000, with penalties for non-compliance.

user avatarTenzin Dorje

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.