Injective Pauses Operations for 4 Hours Following $4.9 Million Binary Options Exploit

Injective, a Layer 1 blockchain protocol focused on decentralized finance, was forced to pause operations for approximately four hours on September 1 after an attacker exploited a vulnerability in its binary options settlement system, stealing approximately $4.9 million. The attacker exploited a decommissioned but still registered oracle (Frontrunner) whose data sources had been cleared, creating 299 markets pointing to that oracle to trigger a "no-price refund" mechanism that paid out 2x. The attacker then bridged approximately $4.9 million across to Ethereum, where the funds remained at the time of reporting. This incident represents a sophisticated attack targeting the protocol's settlement logic, and Injective's temporary pause allowed the team to investigate and address the vulnerability. The exploit highlights the ongoing security challenges facing DeFi protocols, particularly those involving complex financial instruments like binary options.
#GateEventContractTradeSharingChallenge