{"id":55013,"date":"2023-07-22T16:06:17","date_gmt":"2023-07-22T20:06:17","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=55013"},"modified":"2023-07-22T17:36:01","modified_gmt":"2023-07-22T21:36:01","slug":"conic-finance-loses-3-2m-to-reentrancy-attack-on-eth-omnipool","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/conic-finance-loses-3-2m-to-reentrancy-attack-on-eth-omnipool\/","title":{"rendered":"Conic Finance Loses $3.2M to Reentrancy Attack on ETH Omnipool"},"content":{"rendered":"\n

Conic Finance, a platform for balancing liquidity pools for the Curve decentralized finance protocol<\/a>, has been the victim of an Ethereum omnipool exploit.<\/p>\n\n\n\n

\"Conic
Conic Finance Loses $3.2M to Reentrancy Attack on ETH Omnipool<\/figcaption><\/figure>\n\n\n\n

According to the Web3 risk-alert site Beosin Alert, Conic Finance was taken advantage of for $3.26 million in Ether (ETH $1,889) on July 21. Beosin's research shows that almost all of the stolen Bitcoin was transferred to a fresh Ethereum address<\/a> in a single transaction.<\/p>\n\n\n\n

Conic Finance quickly responded to the story on Twitter by confirming it and noting that the platform is looking into the issue and would post updates as soon as they become available.<\/p>\n\n\n\n

Initial research conducted by blockchain security company Peckshield indicates that the new CurveLPOracleV2\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a> contract was the primary culprit. Peckshield wrote: <\/p>\n\n\n\n

\n

\u201cOur audit identifies a similar read-only reentrancy issue. However, the same issue is introduced in the newly introduced CurveLPOracleV2 contract, which was not part of the audit scope,\u201d<\/p>\n<\/blockquote>\n\n\n\n

Conic Finance also claimed it had stopped ETH Omnipool deposits on the Conic front end one hour after the initial notification of the hack.\u201cFollowed with Conic on this one. Issue was identified, only ETH omnipool is affected there,\u201d Curve Finance subsequently wrote.<\/p>\n\n\n\n

DeFi hacks<\/a> and frauds allowed thieves to steal more than $204 million in the second quarter of 2023 alone, according to research from Web3 portfolio app De.Fi. <\/p>\n\n\n\n

Despite this, DeFi breaches and scams caused losses in Q2 that were lower than those in Q1\u2014CertiK reported that over $320 million was lost between January and March.<\/p>\n","protected":false},"excerpt":{"rendered":"

Conic Finance, a platform for balancing liquidity pools for the Curve decentralized finance protocol, has been the victim of an Ethereum omnipool exploit. According to the Web3 risk-alert site Beosin Alert, Conic Finance was taken advantage of for $3.26 million in Ether (ETH $1,889) on July 21. Beosin’s research shows that almost all of the […]<\/p>\n","protected":false},"author":43,"featured_media":55015,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[15420,15421],"class_list":["post-55013","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-conic-finance","tag-eth-omnipool"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/07\/croc_1690055587956.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/55013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/43"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=55013"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/55013\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/55015"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=55013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=55013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=55013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}