El Dorado Exchange attacker returns over $400k after team admits code vulnerabilities – Crypto News – Crypto News
Connect with us
El Dorado Exchange attacker returns over $400k after team admits code vulnerabilities El Dorado Exchange attacker returns over $400k after team admits code vulnerabilities

De-fi

El Dorado Exchange attacker returns over $400k after team admits code vulnerabilities – Crypto News

Published

3 years ago

on

An attacker targeting DeFi protocol El Dorado Exchange (EDE Finance) has returned over $400,000 worth usdc and usdt after the project admitted that it made an “ill-advised decision to manipulate the price.”

Earlier today, the decentralized exchange (dexprotocol was exploited for around $580,000, according to security firm Peckshield, which specializes in monitoring and analyzing suspicious activities on blockchain networks

Following the news, the EDE token was down 14% to $0.5767, at the time of writing, according to CoinMarketCap. date,

How EDE was exploited

A May 30 analyze from Numen Cyber ​​Labs showed that the attacker manipulated the prices of the tokens on the DEX.

The attacker exploited a function within the protocol’s closed-source Oracle contract after invoking the “func_147d9322” function. According to Numen Cyber ​​Labs, these actions allowed the attacker to manipulate the token prices and effectively exploit the project.

Meanwhile, the project’s auditor LunaraySEC said the exploited vulnerabilities were not within the scope of its initial audit, adding that the EDE Finance team has “identified and fixed” the issue.

EDE attacker nets $100k

on-chain date shows that the DEX attacker gained $104,000 after returning 86,222 USDT and 333,948 USDC of the stolen funds.

According to on-chain messagesthe attacker alleged the project’s team inserted a backdoor that would have allowed them to liquidate their users and steal their funds.

“The developers implemented a backdoor that allowed them to force liquidate any position they desired. This malicious activity involved intentionally signing incorrect prices to manipulate users’ positions and steal their funds. To stop this attack on users, a white hat was initiated to bring this issue to light.

The attacker wrote that if the team admitted to this malicious activity, they would return the funds and “bring to light additional vulnerabilities that exist.”

EDE team says the malicious contract was intended to blacklist exploiters

While admitting the allegations, the EDE team stated its “intention was to blacklist those who had previously exploited the system.” it added,

“We did not aim to misappropriate users funds as this would leave a traceable record. We will promptly remove the problematic bomb contract.”

Additionally, the protocol offered the attacker 5% of its team’s token allocation as gratitude for pointing out the other vulnerabilities. However, the offer is subject to the team’s vesting period.

The post El Dorado Exchange attacker returns over $400k after team admits code vulnerabilities appeared first on CryptoSlate,

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Trending