{"id":40971,"date":"2022-11-22T16:55:16","date_gmt":"2022-11-22T20:55:16","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=40971"},"modified":"2022-11-22T16:56:21","modified_gmt":"2022-11-22T20:56:21","slug":"mango-markets-hacker-feigns-curve-short-attack-to-exploit-aave","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/mango-markets-hacker-feigns-curve-short-attack-to-exploit-aave\/","title":{"rendered":"Mango Markets hacker feigns Curve short attack to exploit Aave"},"content":{"rendered":"\n
It appears that shorting of CRV tokens<\/a> was a distraction shot to exploit a sophisticated loophole on DeFi platform Aave.<\/h5>\n\n\n\n
\"Mango
Mango Markets hacker feigns Curve short attack to exploit Aave<\/figcaption><\/figure>\n\n\n\n

Tokens of decentralized exchange Curve Finance (CRV) appear to have experienced a significant short-seller attack, as stated by analysts at Lookonchain on Nov. 22. According to Lookonchain, Avraham Eisenberg's Mango Markets exploiter ponzishorter.eth swapped 40 million USD Coin (USDC) into the decentralized finance<\/a> protocol Aave on November 13 in order to borrow CRV for selling.<\/p>\n\n\n\n

According to reports, the incident caused the price of CRV to drop over the week from $0.625 to $0.464. In the present, blockchain <\/a>data reveals that ponzishorter.eth transferred 30 million CRV ($14.85 million) in additional debt to OKEx for sale through two transactions.<\/p>\n\n\n\n

Lookonchain's team made the assumption that the trade was made to lower the token price “so many people using CRV as collateral will face liquidation.”20 million extra CRV were added as collateral in a wallet connected to Curve's founder as a result of the intense selling activity. <\/p>\n\n\n\n

At the time of publication, the wallet addresses<\/a> on Ave had a health factor of 1.65, which denotes an excess of collateral against borrowed assets. The trades “may just be bait,” according to blockchain analytics company Arkham, with Aave being the main target. <\/p>\n\n\n\n

According to Arkham, Eisenberg amassed a position worth over $100 million on Aave for a complex trading strategy.It starts with a distraction short of CRV tokens on Aave, which are crucial to the exploit<\/a> because they are illiquid on the platform and have very low margin requirements.<\/p>\n\n\n\n

Users would buy the dip in large quantities to protect the price of CRV in response to the subsequent attention, and others would try to pressure the short-seller into covering their position for a loss.<\/p>\n\n\n\n

The platform allegedly lacks the liquidity to buy back more than 20% of the short, so the real plot appears to be preying on the possibility that Aave cannot cover Eisenberg's CRV short positions. The price fall of Aave's native token would then favor bets against it:<\/p>\n\n\n\n

\n

“The real target here was AAVE's vulnerable looping system, which Avi mentioned last month. Using $40 million to borrow almost $50 million of CRV could leave AAVE with severe bad debt.”<\/p>\n<\/blockquote>\n\n\n\n

To liquidate Avi's position, Aave liquidators\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a> will have no way to buy back all the CRV he borrowed. AAVE will have to sell significant amounts of tokens from the safety module to cover this loss,” wrote Arkham. A screenshot of a swap quote provided by the firm shows an 89.8% potential swap impact between USDT and CRV for the estimated $100M position.<\/p>\n\n\n\n

\nhttps:\/\/twitter.com\/napgener\/status\/1594898794256146432\n<\/div><\/figure>\n\n\n\n

At the time of publication, CRV is up 15.47% to $0.5742 in the past 24 hours, while the price of Aave has declined by 6.33% to $53.54 during the same period. On Oct. 11, Eisenberg drained $117 million from the Mango Markets <\/a>protocol and kept $47 million as bug bounty before returning the rest, calling it a “highly profitable trading strategy.”<\/p>\n","protected":false},"excerpt":{"rendered":"

It appears that shorting of CRV tokens was a distraction shot to exploit a sophisticated loophole on DeFi platform Aave. Tokens of decentralized exchange Curve Finance (CRV) appear to have experienced a significant short-seller attack, as stated by analysts at Lookonchain on Nov. 22. According to Lookonchain, Avraham Eisenberg’s Mango Markets exploiter ponzishorter.eth swapped 40 […]<\/p>\n","protected":false},"author":43,"featured_media":40973,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[1104,11067,197],"class_list":["post-40971","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-aave","tag-curve-finance","tag-defi"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/11\/jpg_20221122_214306_0000.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/40971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/43"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=40971"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/40971\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/40973"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=40971"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=40971"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=40971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}