{"id":45604,"date":"2023-02-21T08:15:10","date_gmt":"2023-02-21T12:15:10","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=45604"},"modified":"2023-02-21T08:15:12","modified_gmt":"2023-02-21T12:15:12","slug":"hope-finance-loses-2m-in-recent-exploit","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/hope-finance-loses-2m-in-recent-exploit\/","title":{"rendered":"Hope Finance loses $2M in recent exploit"},"content":{"rendered":"\n

Arbitrum-based decentralized finance<\/a> (DeFi) project Hope Finance has lost users' funds worth about $2 million as a result of a recent smart contract exploit. <\/p>\n\n\n\n

\"Hope
Hope Finance loses $2M in recent exploit<\/figcaption><\/figure>\n\n\n\n

On February 21, the issue was reported by Web3 security company CertiK in response to a tweet from the Hope Finance account\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a> warning customers of the fraud.<\/p>\n\n\n\n

\n

#CommunityAlert<\/use><\/svg><\/span><\/a> \ud83d\udea8@hope_fin<\/use><\/svg><\/span><\/a> have announced the community has been scammed for ~$2m making this the largest #exitscam<\/use><\/svg><\/span><\/a> on Arbitrum in 2023.

$1.86m was transferred to @TornadoCash<\/use><\/svg><\/span><\/a>.

Hope_fin have posted steps for user's to withdraw their staked LPhttps:\/\/t.co\/hJbFXiKujt<\/use><\/svg><\/span><\/a><\/p>— CertiK Alert (@CertiKAlert) February 21, 2023<\/use><\/svg><\/span><\/a><\/blockquote>

It is challenging to find specifics on the project. The platform announced its intentions for an algorithmic stablecoin dubbed Hope token (HOPE), which dynamically regulates its supply in relation to the price of Ether, on Twitter in January 2023.<\/p>\n\n\n\n

Entries on the account claim that immediately after the site became online on February 20, a Nigerian citizen allegedly carried out the fraud and transferred more than $1.86 million to Tornado Cash<\/a>.<\/p>\n\n\n\n

According to a member of the CertiK team, the fraudster altered the smart contract's specifications, which caused money to be taken out of the Hope Finance genesis protocol:<\/p>\n\n\n\n

\n

\u201cIt appears that the scammer changed the TradingHelper contract which meant that when 0x4481 calls OpenTrade on the GenesisRewardPool the funds are transferred to the scammer.\u201d<\/em><\/p>\n<\/blockquote>\n\n\n\n

A Cognitos representative audited the Hope Finance smart contract, according to a tweet from February 13th. The audit report was evaluated by Cointelegraph, which identified two significant contract function weaknesses.<\/p>\n\n\n\n

\"\"
Cognitos audit of Hope Finance\u2019s smart contract. Source: Cognitos<\/figcaption><\/figure>\n\n\n\n

This includes an improper modifier and reentrancy assaults as potential threats. Cognitos discovered that the smart contract code had passed the audit successfully despite indicating these vulnerabilities.<\/p>\n\n\n\n

After the fraud, Hope Finance informed users of a tool that would allow them to immediately remove staked liquidity from the system.<\/p>\n\n\n\n

\n

Steps to withdraw your staked LP from the this fucking scam protocol

1. Go on this linkhttps:\/\/t.co\/HjuvQyxbUX<\/use><\/svg><\/span><\/a>

2. connect your wallet
3. click on emergency withdraw

Enter 0000000000000000000000000000000000000000000000000000000000000002 pic.twitter.com\/5RxtgKXgoo<\/use><\/svg><\/span><\/a><\/p>— Hope Finance (\ud83d\udc99,\ud83e\udde1) (@Hope_fin) February 21, 2023<\/use><\/svg><\/span><\/a><\/blockquote>

Ugwoke Pascal Chukwuebuka, a citizen of Nigeria, is the fraudster, Hope Finance said on its Twitter account. The scammer's name and image have been made public. A few procedures for customers to withdraw their staked LP were also revealed by Hope Finance.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Ugwoke Pascal Chukwuebuka, a citizen of Nigeria, is the fraudster, Hope Finance said on its Twitter account. The scammer's name and image have been made public. A few procedures for customers to withdraw their staked LP were also revealed by Hope Finance.<\/p>\n\n\n\n

The layer 2 roll-up network called Arbitrum on Ethereum allows for the exponential scalability of smart contracts. The two layer-2 protocols continue to handle an increasing number of transactions inside the Ethereum ecosystem alongside Optimist.<\/p>\n","protected":false},"excerpt":{"rendered":"

Arbitrum-based decentralized finance (DeFi) project Hope Finance has lost users’ funds worth about $2 million as a result of a recent smart contract exploit. On February 21, the issue was reported by Web3 security company CertiK in response to a tweet from the Hope Finance account warning customers of the fraud. It is challenging to […]<\/p>\n","protected":false},"author":12,"featured_media":45609,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[4579,11230,1496,13423],"class_list":["post-45604","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-arbitrum","tag-defi-protocol","tag-hack","tag-hope-finance"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/02\/image-53.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/45604","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=45604"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/45604\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/45609"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=45604"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=45604"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=45604"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}