{"id":37258,"date":"2022-10-12T01:06:52","date_gmt":"2022-10-12T05:06:52","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=37258"},"modified":"2022-10-12T15:32:53","modified_gmt":"2022-10-12T19:32:53","slug":"defi-platform-mango-markets-faces-100m-exploit","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/defi-platform-mango-markets-faces-100m-exploit\/","title":{"rendered":"DeFi platform Mango Markets faces $100M exploit"},"content":{"rendered":"\n
Mango Markets, a decentralized finance (DeFi) exchange based on the Solana blockchain<\/a> has reportedly suffered a breach of over $100 million as a result of an attacker manipulating price data.<\/h5>\n\n\n\n
\"DeFi
DeFi platform Mango Markets faces $100M exploit<\/figcaption><\/figure>\n\n\n\n

By manipulating the value of their Mango (MNGO) native token collateral and then taking out “large loans” from Mango Markets' treasury, the attacker was able to drain the exchange of over $100 million, according to a tweet from blockchain security firm OtterSec.<\/p>\n\n\n\n

\n

@mangomarkets\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a> was just drained for over $100M. https:\/\/t.co\/SI4hccCIQx<\/use><\/svg><\/span><\/a>

\ud83e\uddf5 pic.twitter.com\/IAKyXgN8gM<\/use><\/svg><\/span><\/a><\/p>— OtterSec (@osec_io) October 11, 2022<\/use><\/svg><\/span><\/a><\/blockquote>

Soon after, the Mango Markets team<\/use><\/svg><\/span><\/a> posted a tweet asking the attacker to get in touch with them to talk about a bug bounty and advising users not to deposit money until “the issue was more apparent.”<\/p>\n\n\n\n

Later, the team acknowledged that a price oracle\u2014a price data feed of the value of its MNGO token\u2014had been manipulated and declared that it has disabled deposits while looking into the matter.<\/p>\n\n\n\n

\n

We are currently investigating an incident where a hacker was able to drain funds from Mango via an oracle price manipulation.

We are taking steps to have third parties freeze funds in flight. 1\/<\/p>— Mango (@mangomarkets) October 11, 2022<\/use><\/svg><\/span><\/a><\/blockquote>

According to data from CoinGecko, the price of the platforms' MNGO token has decreased by about 52% over the past 24 hours as a result of the news of the exploit.<\/p>\n\n\n\n

According to the exploiters' account on the network, the three biggest withdrawals totaled $50 million in USD Coin, over $26.7 million in Marinade Staked SOL (mSOL), a Solana staking token, and around $24 million in SOL.<\/p>\n\n\n\n

Mango reported that it was withdrawing MNGO worth over $14.7 million and that it is “taking steps to have third parties freeze monies in flight.”<\/p>\n\n\n\n

According to blockchain security firm Beosin, the QANplatform blockchain also experienced its own vulnerability <\/a>on October 11 when its Ethereum bridge was drained of roughly $1.89 million worth of its native QANX coin. According to QANplatform, it is looking into the incident.<\/p>\n","protected":false},"excerpt":{"rendered":"

Mango Markets, a decentralized finance (DeFi) exchange based on the Solana blockchain has reportedly suffered a breach of over $100 million as a result of an attacker manipulating price data. By manipulating the value of their Mango (MNGO) native token collateral and then taking out “large loans” from Mango Markets’ treasury, the attacker was able […]<\/p>\n","protected":false},"author":12,"featured_media":37260,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[73,11476],"tags":[6115,197,2156,10732,275],"class_list":["post-37258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defi-news","category-hacks-and-scams","tag-hackers-2","tag-defi","tag-exploit","tag-mango-markets","tag-solana"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/image-37.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/37258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=37258"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/37258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/37260"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=37258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=37258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=37258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}