Slippage vulnerability + 55 intermediate accounts deleted and they fled—this script is too DeFi; getting back 30% counts as good luck

View Original
MeNews
Rhea Finance discloses the cause of the attack: a flaw in the slippage protection logic led to a loss of 18.4 million USD
On April 18th, the NEAR ecosystem lending platform RHEA Finance was hacked, resulting in the theft of approximately $18.4 million.
The attacker set up fake token pools on Ref Finance and injected liquidity, exploiting slippage vulnerabilities to direct borrowed debt tokens to controlled pools, leading to mass liquidations and depletion of reserves.
To conceal their identity, they deleted 55 intermediary accounts.
So far, they have recovered 3.36M USDC, 1.56M NEAR, and frozen 4.34 million USDT (Tether 3.29M, NEAR Intents 1.05M).
The protocol has been paused, and they are cooperating with exchanges and filing a report.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned