Cryptocurrency [loss] $80M+

Tweet by Qubit Finance

2022-01-27 [vendor] Qubit Finance [chain] bsc
Primary Source ↗
Financial Loss $80.0M (80,000,000 USD)
Blockchain(s) Bsc

Incident Details

An attacker exploited a bug in Qubit Finance, a decentralized lending platform. The bug allowed them to call the “deposit” function without actually depositing any funds. This enabled the attacker to mint 77,162 xETH collateral, which they exchanged for BNB worth nearly $80 million. The platform has said they have tried to contact the exploiter to offer the “maximum bounty”, which is apparently $250,000. Tempting, I’m sure.

Total loss estimated at $80,000,000.

Technical Details

Initial Attack Vector
Software bug / unintentional loss
Vendor / Product
Qubit Finance

Timeline

  1. 2022-01-27 Breach occurred
  2. 2022-01-27 Publicly disclosed