{"id":17509,"date":"2022-01-29T10:52:39","date_gmt":"2022-01-29T09:52:39","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=17509"},"modified":"2022-01-29T10:52:48","modified_gmt":"2022-01-29T09:52:48","slug":"cross-chain-bridge-qubit-loses-80-million-to-hackers","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/cross-chain-bridge-qubit-loses-80-million-to-hackers\/","title":{"rendered":"Cross-Chain Bridge Qubit loses $80 Million to hackers"},"content":{"rendered":"\n<h5 class=\"wp-block-heading\" id=\"according-to-a-report-from-certik-cross-chain-bridge-qubit-has-been-hacked-with-losses-spanning-over-80m-in-assets-the-recent-compromise-made-the-incident-the-largest-defi-exploit-of-2022\">According to a report from CertiK, <a href=\"https:\/\/coinscreed.com\/staging\/umbrella-network-launches-a-cross-chain-bridge-linking-ethereum-and-bsc.html\" data-type=\"post\" data-id=\"11369\">cross-chain bridge Qubit<\/a> has been hacked with losses spanning over $80M in assets. The recent compromise made the incident the largest DeFi exploit of 2022.<\/h5>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322.png\" alt=\"Cross-Chain Bridge Qubit loses $80 Million to hackers \" class=\"wp-image-17517\" width=\"842\" height=\"600\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322.png 795w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322-300x214.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322-768x548.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322-120x86.png 120w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322-350x250.png 350w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322-750x535.png 750w\" sizes=\"(max-width: 842px) 100vw, 842px\" \/><\/figure><\/div>\n\n\n\n<p>According to CertiK's blockchain security specialists, a decentralized finance (DeFi) vulnerability linked to Qubit Finance's <a href=\"https:\/\/www.google.com\/search?q=Cross-Chain+Bridge+Qubit+loses+%2480+Million+to+hackers&rlz=1C1SQJL_enNG889NG889&oq=Cross-Chain+Bridge+Qubit+loses+%2480+Million+to+hackers&aqs=chrome..69i57.373j0j9&sourceid=chrome&ie=UTF-8\" data-type=\"URL\" data-id=\"https:\/\/www.google.com\/search?q=Cross-Chain+Bridge+Qubit+loses+%2480+Million+to+hackers&rlz=1C1SQJL_enNG889NG889&oq=Cross-Chain+Bridge+Qubit+loses+%2480+Million+to+hackers&aqs=chrome..69i57.373j0j9&sourceid=chrome&ie=UTF-8\" target=\"_blank\" rel=\"noopener\">Binance smart chain &#8211; Ethereum bridge <span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a>resulted in an $80 million loss. Qubit Finance is a DeFi protocol that provides lending features as well as a BSC-ETH cross-chain bridge.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"555\" height=\"516\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-320.png\" alt=\"\" class=\"wp-image-17515\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-320.png 555w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-320-300x279.png 300w\" sizes=\"(max-width: 555px) 100vw, 555px\" \/><\/figure>\n\n\n\n<p>The malicious attacker took advantage of the cross-chain bridge and was able to obtain 77,162 qXETH to borrow and convert into other currencies. The hacker was able to get &#8220;15,688 wETH ($37.6 million), 767 BTC-B ($28.5 million), about $9.5 million in various stablecoins, and $5 million in CAKE, BUNNY, and MDX&#8221; by leveraging stolen coins. <a href=\"https:\/\/coinscreed.com\/staging\/certiks-says-cryptocars-is-not-a-rug-pull.html\" data-type=\"post\" data-id=\"17485\">CertiK's<\/a> post-mortem analysis goes on to say that:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Essentially what the attacker did is take advantage of a logical error in Qubit Finance\u2019s code that allowed them to input malicious data and withdraw tokens on Binance Smart Chain when none were deposited on<a href=\"https:\/\/coinscreed.com\/staging\/despite-frequent-outages-there-are-mixed-feelings-on-solanas-feasibility-as-an-ethereum-killer.html\" data-type=\"post\" data-id=\"17371\"> Ethereum<\/a>.<\/p><\/blockquote>\n\n\n\n<p>At the time of writing, the address still has all of the stolen coins, which are valued at $79,332,154. The cross-chain bridge vulnerability, according to CertiK, underlines two crucial points. &#8220;The significance of cross-chain bridges that promote interoperability between<a href=\"https:\/\/coinscreed.com\/staging\/flux-joins-nvidias-inception-program-to-help-advance-the-web3-initiative.html\" data-type=\"post\" data-id=\"17493\"> blockchains<\/a> [as well as] the importance of these bridges' security.&#8221; Cross-chain bridge technology has advanced significantly in recent years.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"726\" height=\"422\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-321.png\" alt=\"\" class=\"wp-image-17516\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-321.png 726w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-321-300x174.png 300w\" sizes=\"(max-width: 726px) 100vw, 726px\" \/><figcaption>A visual perspective of the stolen funds taken from Qubit\u2019s Binance Smart Chain \u2194 Ethereum cross-chain bridge. Source: CertiK<\/figcaption><\/figure>\n\n\n\n<p>According to Dune Analytics, the total value locked (TVL) on Friday was $11.79 billion. With $5.1 billion in TVL, <a href=\"https:\/\/coinscreed.com\/staging\/polygon-matic-sees-massive-oversold-bounce-after-250b-crypto-market-comeback.html\" data-type=\"post\" data-id=\"17350\">Polygon<\/a> has the largest (MATIC &#8211; ETH) cross-chain bridge. CertiK's post-mortem research emphasizes the importance of bridge security as cross-chain technology advances.<\/p>\n\n\n\n<p>&#8220;Bridges will only become more significant as we transition from an Ethereum-dominated world to a fully multi-chain world,&#8221; CertiK says in his study of Qubit's losses. &#8220;People need to move funds from one blockchain to another, but they need to do so in a fashion that isn't vulnerable to hackers capable of stealing more than $80 million.&#8221;<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>According to a report from CertiK, cross-chain bridge Qubit has been hacked with losses spanning over $80M in assets. The recent compromise made the incident the largest DeFi exploit of 2022. According to CertiK&#8217;s blockchain security specialists, a decentralized finance (DeFi) vulnerability linked to Qubit Finance&#8217;s Binance smart chain &#8211; Ethereum bridge resulted in an [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":17517,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[73],"tags":[6357,5643,6115,6920],"class_list":["post-17509","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defi-news","tag-certik","tag-defi-2","tag-hackers-2","tag-qubit"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/01\/image-322.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/17509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=17509"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/17509\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/17517"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=17509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=17509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=17509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}