Cryptocurrency [loss] $16M+

Tweet by PeckShieldAlert

2022-04-02 [vendor] Inverse Finance [chain] ethereum
Primary Source ↗
Financial Loss $15.6M (15,600,000 USD)
Blockchain(s) Ethereum

Incident Details

An attacker targeting the defi project Inverse Finance was able to manipulate the price oracle of INV/ETH, artificially inflating the apparent price of INV and allowing the attacker to borrow against it. The attacker was ultimately able to turn the borrowed DOLA, ETH, WBTC, and YFI tokens, priced at a total of around $15.6 million, into around 4300 ETH (priced at around $14.5 million). As of early April 2, the attacker had transferred 1,300 ETH (around $4.5 million) to a tumbler to make it more difficult to trace.

Total loss estimated at $15,600,000.

Technical Details

Initial Attack Vector
Oracle price manipulation
Vendor / Product
Inverse Finance

Timeline

  1. 2022-04-02 Breach occurred
  2. 2022-04-02 Publicly disclosed