Other
[loss] $76,000
"Creative attacker steals $76,000 in RUNE by giving out free tokens"
Primary Source ↗Financial Loss
$76,000
(76,000 USD)
Incident Details
An attacker giving out free UniH tokens was able to exploit a bug in a non-standard token contract and steal RUNE tokens from unsuspecting victims. By baiting people into selling their new UniH tokens, the attacker was able to execute malicious code that transferred any RUNE tokens also in their wallet. This was the fourth exploit pertaining to the Thorchain platform in the month of July.
Total loss estimated at $76,000.
Technical Details
- Initial Attack Vector
- Malicious code injection / supply chain
- Vendor / Product
- RUNE thefts
Timeline
- 2021-07-23 Breach occurred
- 2021-07-23 Publicly disclosed