{"id":18020,"date":"2022-02-08T16:31:11","date_gmt":"2022-02-08T15:31:11","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=18020"},"modified":"2022-02-08T16:34:54","modified_gmt":"2022-02-08T15:34:54","slug":"polygon-native-stablecoin-project-qi-dao-faces-exploit-of-about-13m-on-superfluid-vested-contract","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/polygon-native-stablecoin-project-qi-dao-faces-exploit-of-about-13m-on-superfluid-vested-contract\/","title":{"rendered":"Polygon native stablecoin project Qi Dao faces exploit of about $13M on Superfluid vested contract"},"content":{"rendered":"\n<h5 class=\"wp-block-heading\" id=\"the-superfluid-vesting-contract-on-polygon-s-native-stablecoin-protocol-qi-dao-was-exploited-resulting-in-a-65-reduction-in-the-price-of-the-governance-token-qi-dao-qi-dropped-from-1-24-to-0-18\">The Superfluid vesting contract on<a href=\"https:\/\/coinscreed.com\/staging\/polygon-matic-sees-massive-oversold-bounce-after-250b-crypto-market-comeback.html\" data-type=\"post\" data-id=\"17350\"> Polygon's native stablecoin protoco<\/a>l, Qi Dao, was exploited, resulting in a 65% reduction in the price of the governance token Qi Dao (QI) dropped from $1.24 to $0.18.<\/h5>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"964\" height=\"511\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-123.png\" alt=\"Polygon native stablecoin projet Qi Dao faces exploit of about $13M on Superfluid vested contract\" class=\"wp-image-18027\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-123.png 964w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-123-300x159.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-123-768x407.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-123-750x398.png 750w\" sizes=\"(max-width: 964px) 100vw, 964px\" \/><\/figure><\/div>\n\n\n\n<p>On Tuesday, Qi Dao acknowledged the <a href=\"https:\/\/www.google.com\/search?q=Polygon+native+stablecoin+projet+Qi+Dao+faces+exploit+of+about+%2413M+on+Superfluid+vested+contract&rlz=1C1SQJL_enNG889NG889&oq=Polygon+native+stablecoin+projet+Qi+Dao+faces+exploit+of+about+%2413M+on+Superfluid+vested+contract&aqs=chrome..69i57.660j0j9&sourceid=chrome&ie=UTF-8\" data-type=\"URL\" data-id=\"https:\/\/www.google.com\/search?q=Polygon+native+stablecoin+projet+Qi+Dao+faces+exploit+of+about+%2413M+on+Superfluid+vested+contract&rlz=1C1SQJL_enNG889NG889&oq=Polygon+native+stablecoin+projet+Qi+Dao+faces+exploit+of+about+%2413M+on+Superfluid+vested+contract&aqs=chrome..69i57.660j0j9&sourceid=chrome&ie=UTF-8\" target=\"_blank\" rel=\"noopener\">Superfluid vesting contract exploits <span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a>on Twitter but assured users that their assets were safe and that none of Qi Dao's funds was harmed.<\/p>\n\n\n\n<p>Superfluid also acknowledged the Qi Dao exploit and stated that it was researching the problem and would provide updates as needed. The protocol allows users to move assets on-chain in a continuous flow from one wallet to another in real-time.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-119.png\" alt=\"This image has an empty alt attribute; its file name is image-119.png\" \/><\/figure>\n\n\n\n<p>While customers' funds were not affected, the attackers made off with $20 million in tokens, including 24 <a href=\"https:\/\/coinscreed.com\/staging\/automated-market-maker-mono-x-launches-mainnet-on-ethereum-and-polygon.html\" data-type=\"post\" data-id=\"12556\">Wrapped Ether (wETH<\/a>), 562,000 USD Coin (USDC), 44,000 Stake DAO (SDT), 1.5 million Museum of Crypto Art (MOCA), 23,000 Stacker Ventures (STACK), and over 40,000 sdam3CRV. According to early reports, the stolen monies belonged to some of the project's early backers and contained team-vested tokens.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"249\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-120.png\" alt=\"\" class=\"wp-image-18024\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-120.png 512w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-120-300x146.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><figcaption>Reported Hacker Wallet Activity Source: PolygonScan<\/figcaption><\/figure>\n\n\n\n<p>SlowMist, a crypto-analytics firm, produced a fund tracker that shows the balance of each coin taken. It was believed that the hackers stole around $13 million worth of cryptocurrency after studying the<a href=\"https:\/\/coinscreed.com\/staging\/el-salvador-revives-chivo-wallet-with-plans-to-install-1500-bitcoin-atms.html\" data-type=\"post\" data-id=\"17709\"> wallet transaction<\/a> data.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-121.png\" alt=\"\" class=\"wp-image-18025\" width=\"537\" height=\"326\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-121.png 517w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-121-300x182.png 300w\" sizes=\"(max-width: 537px) 100vw, 537px\" \/><figcaption>Hacker\u2019s reported balance Source: SlowMist<\/figcaption><\/figure>\n\n\n\n<p>The attackers began dumping stolen Qi Dao on the QuickSwap <a href=\"https:\/\/coinscreed.com\/staging\/square-ceo-discusses-plans-to-create-a-decentralized-exchange-for-bitcoin.html\" data-type=\"post\" data-id=\"8814\">decentralized exchange <\/a>with heavy slippage, causing the governance token's price to plummet by 65 percent.<\/p>\n\n\n\n<p>After plunging below $0.18, the Polygon community took advantage of the opportunity to buy the dip, helping the governance token rise to $0.6. It's worth noting that the hack was carried out via a Superfluid vulnerability, rather than Qi Dao.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-122.png\" alt=\"\" class=\"wp-image-18026\" width=\"439\" height=\"648\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-122.png 378w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-122-203x300.png 203w\" sizes=\"(max-width: 439px) 100vw, 439px\" \/><\/figure>\n\n\n\n<p>Following the exploit, Qi Dao momentarily suspended its bridge, with the goal of quickly resolving the problem. The exploit was discovered within 24 hours after Polygons raised $450 million in funding; however, the community reacted positively to the native stablecoin protocol, emphasizing that the<a href=\"https:\/\/coinscreed.com\/staging\/users-attack-multichain-over-security-vulnerability-leading-to-losses-of-over-3m.html\" data-type=\"post\" data-id=\"16802\"> vulnerability<\/a> was caused by a third-party weakness rather than a problem with the protocol itself.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Superfluid vesting contract on Polygon&#8217;s native stablecoin protocol, Qi Dao, was exploited, resulting in a 65% reduction in the price of the governance token Qi Dao (QI) dropped from $1.24 to $0.18. On Tuesday, Qi Dao acknowledged the Superfluid vesting contract exploits on Twitter but assured users that their assets were safe and that [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":18027,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[73],"tags":[7111,7113,5682,7112,7114],"class_list":["post-18020","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defi-news","tag-superfluid-vested-contract","tag-expliots","tag-polygon-2","tag-polygon-native-stablecoin","tag-qi-dao"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/02\/image-123.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/18020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=18020"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/18020\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/18027"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=18020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=18020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=18020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}