ID:
inverse-finance-8
100 pts
Platform:
Type:
Category:
Method:
Data Sources:
Ethereum
Protocol
Lending
Contract Vulnerabilities
Extended Method:
Price oracle manipulation
Days in Operation:
643
(1.76 Years)
100 pts each
The company wrote on Twitter that a hacker managed to manipulate its money market, Anchor, and increased the price of INV via Sushiswap – an open-source ecosystem of DeFi tools.
INV is an Ethereum token that powers Inverse Finance, a decentralized platform used for lending, borrowing, and creating synthetic assets.
The manipulation caused a sharp increase in the price of INV, allowing the hacker to borrow $15.6 million in the DOLA, ETH, WBTC and YFI cryptocurrencies against it.
“The manipulation was not a flash loan attack and was unrelated to Inverse’s smart contract or front end code. All future borrows on Anchor are temporarily paused,” the company said initially.
In a blog post on 4/4, Inverse Finance confirmed PeckShield’s analysis which found that the attacker withdrew 901 ETH from Tornado Cash and made a series of trades primarily in the INV/DOLA pool on SushiSwap on Saturday morning. Tornado Cash is a cryptocurrency mixer that allows people to hide the origin of funds.
DISCLAIMER: While web3rekt has used the best efforts in aggregating and maintaining this database, this web site makes no representations or warranties with respect to the accuracy or completeness of its information and data herein, and specifically disclaim any implied warranties of merchantability or fitness for any particular purpose.
Under no circumstances, shall web3rekt be liable for any loss of profit or funds, any regulatory or governmental penalties, any legal costs, or any other commercial and non-commercial damages, including but not limited to special, incidental, consequential, or other damages from any or all usage of the data and information derived from this database.