{"id":45241,"date":"2023-02-13T17:54:45","date_gmt":"2023-02-13T21:54:45","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=45241"},"modified":"2023-02-13T17:54:48","modified_gmt":"2023-02-13T21:54:48","slug":"dforce-verifies-return-of-3-65-million-to-their-vaults","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/dforce-verifies-return-of-3-65-million-to-their-vaults\/","title":{"rendered":"DForce verifies return of $3.65 Million to their vaults"},"content":{"rendered":"\n<p>The exploited funds have been returned to to Optimism and Arbitrum vaults, according to DForce, a <a href=\"https:\/\/coinscreed.com\/staging\/square-is-building-an-open-developer-platform-for-decentralized-financial-services.html\" target=\"_blank\" rel=\"noreferrer noopener\">decentralized financial system<\/a>. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658-1024x576.jpg\" alt=\"DForce verifies the return of $3.65 Million to their vaults\" class=\"wp-image-45243\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658-1024x576.jpg 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658-300x169.jpg 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658-768x432.jpg 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658-150x84.jpg 150w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658-750x422.jpg 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658-1140x641.jpg 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658.jpg 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">DForce verifies the return of $3.65 Million to their vaults<\/figcaption><\/figure>\n\n\n\n<p>In a hacking attempt three days ago, users of the <a href=\"https:\/\/coinscreed.com\/staging\/russia-based-sberbank-to-introduce-defi-platform-on-ethereum.html\" target=\"_blank\" rel=\"noreferrer noopener\">DeFi protocol lost money on Optimism and Arbitrum<\/a>. On February 13, the dForce network experienced a security compromise, according to onchain security company Peckshield. <\/p>\n\n\n\n<p>DForce lost around $3.65 million as a result of a reentrancy hack attack on two vaults. To safeguard the security of the remaining cash after the hack, dForce immediately paused the vaults.<\/p>\n\n\n\n<p>Earlier today, dForce tweeted that all of the monies that had been misused have been returned to their multi-sig on both Optimism and Arbitrum. The tweet called it &#8220;a great finale for all&#8221; and added that the company would pay all affected users.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"embed-twitter\"><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">1\/5 On Feb 13, 2023, the exploited funds were fully returned to our multi-sig on both Arbitrum and Optimism, a perfect ending for all. <br><br>All impacted users will be made whole, we will announce the details for distribution of the funds over the next few days.<\/p>&mdash; dForce (@dForcenet) <a href=\"https:\/\/twitter.com\/dForcenet\/status\/1625004207395807232?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">February 13, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/div><\/figure>\n\n\n\n<p>The dForce team referred to the exploiter who came forward as a &#8220;whitehat,&#8221; per the tweet. They agreed to offer a bounty and discontinue all inquiries and legal actions after engaging in negotiations with the exploiter.<\/p>\n\n\n\n<p>Peckshield claims that despite the damages affecting three <a href=\"https:\/\/coinscreed.com\/staging\/voyager-customers-to-receive-51-of-pre-bankruptcy-crypto-assets.html\" target=\"_blank\" rel=\"noreferrer noopener\">crypto assets<\/a>, the breach only compromised the Arbitrum and Optimism layers. Fortunately, other components of the protocol were still secure and functional in dForce Lending. They made a pledge to provide a thorough report later but did not provide any other details on the hack.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"embed-twitter\"><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">Hi <a href=\"https:\/\/twitter.com\/dForcenet?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@dForcenet<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> , you may want to take a look:  <a href=\"https:\/\/t.co\/htCZcVXvYJ\" target=\"_blank\">https:\/\/t.co\/htCZcVXvYJ<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/p>&mdash; PeckShield Inc. (@peckshield) <a href=\"https:\/\/twitter.com\/peckshield\/status\/1623888002429882369?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">February 10, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/div><\/figure>\n\n\n\n<p>DForce finds a means to avoid the abuseBlockSec, a blockchain security network, supported Peckshield by identifying the attack and connecting it to the read-only reentrancy surrounding the curve pool. <\/p>\n\n\n\n<p>The oracle price that the <a href=\"https:\/\/www.google.com\/search?q=DForce+verifies+the+return+of+%243.65+Million+to+their+vaults&client=opera&ei=lqPqY8bYF8H_7_UPhKuy4Ac&ved=0ahUKEwjG-5X1sJP9AhXB_7sIHYSVDHwQ4dUDCA4&uact=5&oq=DForce+verifies+the+return+of+%243.65+Million+to+their+vaults&gs_lcp=Cgxnd3Mtd2l6LXNlcnAQAzoZCAAQ6gIQtAIQigMQtwMQ1AMQ1QMQ5QIYATofCC4QxwEQ0QMQ6gIQtAIQigMQtwMQ1AMQ1QMQ5QIYAToNCC4QjwEQ6gIQtAIYAjoNCAAQjwEQ6gIQtAIYAkoECEEYAEoECEYYAVCnFlinFmDbH2gCcAF4AIABwwKIAcMCkgEDMy0xmAEAoAEBoAECsAEUwAEB2gEECAEYB9oBBggCEAEYCg&sclient=gws-wiz-serp\" target=\"_blank\" rel=\"noreferrer noopener\">dForce Lending protocol<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> uses can also be easily manipulated by the attacker, according to BlockSec. DForce protocol also expressed gratitude to various security communities and platforms for their assistance and support. <\/p>\n\n\n\n<p>Notably, SlowMist, a blockchain security company, was acknowledged in the protocol for helping with the research. The security team for the protocol acknowledged spending more than $3 million over the last few years on security audits and bounty schemes. <\/p>\n\n\n\n<p>Furthermore, they are prepared to increase their bounty program's scope in order to promote more ethical hacking because maintaining security is a never-ending task.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The exploited funds have been returned to to Optimism and Arbitrum vaults, according to DForce, a decentralized financial system. In a hacking attempt three days ago, users of the DeFi protocol lost money on Optimism and Arbitrum. On February 13, the dForce network experienced a security compromise, according to onchain security company Peckshield. DForce lost [&hellip;]<\/p>\n","protected":false},"author":43,"featured_media":45243,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21],"tags":[197,13366,12002],"class_list":["post-45241","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-defi","tag-dforce","tag-hacks"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/croc_1676319607658.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/45241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/43"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=45241"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/45241\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/45243"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=45241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=45241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=45241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}