{"id":20962,"date":"2022-03-15T22:28:28","date_gmt":"2022-03-15T21:28:28","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=20962"},"modified":"2022-03-15T22:28:33","modified_gmt":"2022-03-15T21:28:33","slug":"deus-finance-loses-3m-worth-of-dai-and-ether-to-hackers","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/deus-finance-loses-3m-worth-of-dai-and-ether-to-hackers\/","title":{"rendered":"Deus Finance loses $3M worth of DAI and Ether to hackers"},"content":{"rendered":"\n<h5 class=\"wp-block-heading\">Deus Finance, a multi-token decentralized finance (DeFi) marketplace, has been the latest<a href=\"https:\/\/coinscreed.com\/staging\/openseas-short-deadline-opens-window-of-opportunity-for-hackers.html\" data-type=\"post\" data-id=\"18483\"> victim of an exploit<\/a> that has resulted in over $3 million in losses in the Dai (DAI) and Ether (ETH) cryptocurrency markets.<\/h5>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"831\" height=\"410\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-104.png\" alt=\"Deus Finance loses $3M worth of DAI and Ether to hackers\" class=\"wp-image-20968\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-104.png 831w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-104-300x148.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-104-768x379.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-104-150x74.png 150w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-104-750x370.png 750w\" sizes=\"(max-width: 831px) 100vw, 831px\" \/><\/figure><\/div>\n\n\n\n<p>PeckShield, a <a href=\"https:\/\/www.google.com\/search?q=Deus+Finance+loses+%243M+worth+of+DAI+and+Ether+to+hackers&rlz=1C1SQJL_enNG889NG889&oq=Deus+Finance+loses+%243M+worth+of+DAI+and+Ether+to+hackers&aqs=chrome..69i57.583j0j9&sourceid=chrome&ie=UTF-8\" data-type=\"URL\" data-id=\"https:\/\/www.google.com\/search?q=Deus+Finance+loses+%243M+worth+of+DAI+and+Ether+to+hackers&rlz=1C1SQJL_enNG889NG889&oq=Deus+Finance+loses+%243M+worth+of+DAI+and+Ether+to+hackers&aqs=chrome..69i57.583j0j9&sourceid=chrome&ie=UTF-8\" target=\"_blank\" rel=\"noopener\">DeFi analytic firm<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a>, came to Twitter to explain the situation and how the funds were used. The attackers were able to exploit and manipulate a price oracle for flash loans, causing users' funds to become insolvent.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"embed-twitter\"><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">1\/ <a href=\"https:\/\/twitter.com\/DeusDao?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@deusdao<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> Deus Finance was exploited in <a href=\"https:\/\/t.co\/bfYCQcz5rZ\" target=\"_blank\">https:\/\/t.co\/bfYCQcz5rZ<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a>, leading to the gain of ~$3M for the hacker (The protocol loss may be larger), including 200,000 DAI and 1101.8 ETH<\/p>&mdash; PeckShield Inc. (@peckshield) <a href=\"https:\/\/twitter.com\/peckshield\/status\/1503632734299701250?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">March 15, 2022<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/div><\/figure>\n\n\n\n<p>The price of the pair of StableV1 AMM \u2013 USDC\/DEI, which the protocol utilized to create a price oracle for its flash loans, was changed by the hackers.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"517\" height=\"174\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-102.png\" alt=\"\" class=\"wp-image-20963\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-102.png 517w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-102-300x101.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-102-150x50.png 150w\" sizes=\"(max-width: 517px) 100vw, 517px\" \/><figcaption>Example of Price Manipulation Source: PeckShield<\/figcaption><\/figure>\n\n\n\n<p>Hackers took 200,000 DAI and 1101.8 ETH, according to PeckShield, and the total amount of stolen cash could be higher than the initial estimations of $3 million.<\/p>\n\n\n\n<p>The stolen monies were then channelled through the <a href=\"https:\/\/coinscreed.com\/staging\/cross-chain-router-protocol-multichain-recovers-about-50-of-its-stolen-funds-from-hackers.html\" data-type=\"post\" data-id=\"18475\">Multichain Protocol<\/a> by the hacker behind the attack, who used the currency mixer tool Tornado cash (previously known as AnySwap).<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"674\" height=\"260\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-103.png\" alt=\"\" class=\"wp-image-20964\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-103.png 674w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-103-300x116.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-103-150x58.png 150w\" sizes=\"(max-width: 674px) 100vw, 674px\" \/><figcaption>Stolen Funds Washed through TornadoCash Source: EtherScan<\/figcaption><\/figure>\n\n\n\n<p>Deus Finance admitted the flaw in its <a href=\"https:\/\/coinscreed.com\/staging\/the-moma-protocol-collects-225-million-for-long-tail-defi-lending-infinite-liquidity.html\" data-type=\"post\" data-id=\"3329\">lending protocol<\/a> and stated that its DEI loan contract had been terminated. The DeFi protocol also claimed that the exploit had no effect on DEUS or DEI.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"embed-twitter\"><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">We are aware of the recent exploit reports regarding the <a href=\"https:\/\/twitter.com\/search?q=%24DEI&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$DEI<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> lending contract.<br><br>Contract has been closed, both <a href=\"https:\/\/twitter.com\/search?q=%24DEUS&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$DEUS<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> & <a href=\"https:\/\/twitter.com\/search?q=%24DEI&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$DEI<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> are unaffected. Devs are working on a summary of the events, all information will be communicated once we have assessed the full situation.<\/p>&mdash; DEUS (@DeusDao) <a href=\"https:\/\/twitter.com\/DeusDao\/status\/1503652836978143242?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">March 15, 2022<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">About Deus Finance<\/h2>\n\n\n\n<p>Deus Finance offers DeFi infrastructure to assist others in the creation of financial instruments such as synthetic <a href=\"https:\/\/coinscreed.com\/staging\/colombia-set-to-teach-youth-about-crypto-and-stock-trading-using-games.html\" data-type=\"post\" data-id=\"9877\">stock trading platforms,<\/a> options, and futures trading.<\/p>\n\n\n\n<p>Deus Protocol's CEO, Lafayette Tabor, used Twitter to notify the community about the repayment schemes. He stated that the developers would draft a new contract that would allow affected users to refund their loans. He elaborated:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>\u201cWe will create a contract you will be able to repay your DEBT on it and get your sAMM that were liquidated, we will also implement a feature that lets you swap DEI against a small MUON allocation. (paying from my team allocation).\u201d<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Deus Finance, a multi-token decentralized finance (DeFi) marketplace, has been the latest victim of an exploit that has resulted in over $3 million in losses in the Dai (DAI) and Ether (ETH) cryptocurrency markets. PeckShield, a DeFi analytic firm , came to Twitter to explain the situation and how the funds were used. The attackers [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":20968,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[73,21],"tags":[8138,6098,8137,6115],"class_list":["post-20962","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defi-news","category-news","tag-ether-3","tag-dai-2","tag-deus-finance","tag-hackers-2"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/03\/image-104.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/20962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=20962"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/20962\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/20968"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=20962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=20962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=20962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}