Key Takeaways
- $300,000 of crypto stolen from OlympusDAO at the moment has been returned by the hacker accountable for the theft.
- The unique assault noticed the hacker exploit a sensible contract associated to the challenge’s bond options.
- OlympusDAO is one in every of a number of DeFi platforms focused in assaults totaling $718 million this month.
Share this text
The hacker behind this morning’s $300,000 assault on OlympusDAO has returned the stolen funds.
Hacker Returns Funds to OlympusDAO
OlympusDAO has recovered all of its stolen funds.
In response to statements from an OlympusDAO spokesperson, the attacker accountable for the theft returned all of the funds to the challenge after negotiating a deal.
The stolen funds had been returned to the challenge in two transactions on the Ethereum blockchain at 2:29 p.m. UTC and a couple of:30 p.m. UTC. These transactions occurred simply hours after the funds had been stolen at 5:22 a.m. UTC. The unique theft noticed the attacker drain 30,437 OHM valued at almost $300,000 from OlympusDAO’s good contracts.
The attacker focused a particular bond contract known as BondFixedExpiryTeller. In response to PeckShield, one of many contract’s capabilities didn’t correctly validate inputs, permitting the attacker to enter false values and switch funds.
Peckshield confused that the affected contract was not a local OlympusDAO contract. Quite, it was a Bond Protocol good contract used to pilot launch OHM bonds.
OlympusDAO confirmed the exploit on its Discord channel at the moment. There, it said that the attacker “was capable of withdraw roughly 30K OHM ($300K)” however that a lot of the challenge’s different funds remained protected.
OlympusDAO is a decentralized reserve forex protocol backed by $260 million price of property held by 120,000 holders. It permits customers to have interaction with the protocol by way of staking and bonding—the latter of which entails buying and selling tokens for OHM at a reduction.
The challenge opened its second spherical of bond testing on October 13. At the moment, it warned that the present part of the function constituted a “testing interval and never the complete OHM Bonds launch”—although its uncertainty appeared to concern market discovery quite than safety points.
OlympusDAO’s OHM token is at present valued at $9.94 and appears to have been minimally affected by at the moment’s assault.
A number of different DeFi platforms have been focused in assaults this October, together with Mango Markets, TempleDAO, BNB Chain, and Moola Market. At the very least $718 million has been stolen this month, in keeping with Chainalysis knowledge.
Disclosure: On the time of writing, the writer of this piece owned BTC, ETH, and different cryptocurrencies.