Euler Finance, a DeFi lending and borrowing protocol has been exploited by almost $200 million in a flash loan attack.
Contents lost in the attack include $8.7 million in DAI, $18.5 million in WBTC, $135.8 million in stETH, and $33.8 million in USDC, information compiled by BlockSec shows.
“We are aware and our team is currently working with security professionals and law enforcement. We will release further information as soon as we have it,” Euler Labs tweeted.
Flash loan attacks have been common in DeFi — including some similarly large exploits such as Beanstalk’s loss of $182 million in April 2022.
In a traditional flash loan, traders are able to borrow cryptocurrencies without any collateral, but these assets must be returned within the same transaction.
Euler’s exploiter used a series of six different flash loans in the attack by tricking its smart contract into believing there were fewer collateral tokens than debt tokens.
According to blockchain security and data analytics company PeckShield, “The hack is made possible due to the flawed logic [in] its donation and liquidation.”
“Specifically, the donateToReserves needs to ensure the donator is still over-collateralized,” the company tweeted. “And liquidation needs to ensure the *correct* conversion rate from borrow to collateral asset.”
Following the exploit, the price of Euler’s native token (EUL) has dipped by over 55%. At the time of writing, it is currency trading at $2.75, according to CoinGecko.
Get the day’s top crypto news and insights delivered to your email every evening. Subscribe to Blockworks’ free newsletter now.
Want alpha sent directly to your inbox? Get degen trade ideas, governance updates, token performance, can’t-miss tweets and more from Blockworks Research’s Daily Debrief.
Can’t wait? Get our news the fastest way possible. Join us on Telegram and follow us on Google News.
Source: https://blockworks.co/news/euler-suffers-200m-exploit