{"id":61983,"date":"2023-10-18T16:49:09","date_gmt":"2023-10-18T20:49:09","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=61983"},"modified":"2023-10-18T16:49:28","modified_gmt":"2023-10-18T20:49:28","slug":"defi-protocol-hope-lend-loses-all-526-eth-after-attack","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/defi-protocol-hope-lend-loses-all-526-eth-after-attack\/","title":{"rendered":"DeFi Protocol Hope Lend Loses all 526 ETH After Attack"},"content":{"rendered":"\n<p>Hope Lend Ethereum<a href=\"https:\/\/coinscreed.com\/staging\/platypus-finance-recovers-90-of-assets-lost-in-exploit.html\" target=\"_blank\" rel=\"noreferrer noopener\"> decentralized finance (DeFi) protocol <\/a>has almost no assets remaining as all 526 Ether in total value locked was emptied in an attack on Oct. 18.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"546\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60-1024x546.png\" alt=\"DeFi Protocol Hope Lend Loses all 526 ETH After Attack\" class=\"wp-image-61989\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60-1024x546.png 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60-300x160.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60-768x409.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60-18x10.png 18w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60-750x400.png 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60-1140x607.png 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60.png 1171w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">DeFi Protocol Hope Lend Loses all 526 ETH After Attack<\/figcaption><\/figure>\n\n\n\n<p>According to multiple blockchain security firms, on October 18, two individuals stole from Hope Lend a total of 526 Ether worth $825,357 at publication: a forerunner who defeated the original hacker after discovering the exploit and the original hacker. &#8220;The successful attacker gained 264 ETH and paid a 263 ETH bribe to an ETH validator,&#8221; CertiK reported.<\/p>\n\n\n\n<p>Hope.money, the creator of the DeFi protocol, presented an alternate version of the incident. In its X thread, developers claim that a single hacker stole 526 ETH worth of user funds, paid 263.91 ETH in bribes to a validator purportedly managed by<a href=\"https:\/\/coinscreed.com\/staging\/lido-finance-activates-staking-rate-limit-as-deposits-rise.html\" target=\"_blank\" rel=\"noreferrer noopener\"> Lido Finance<\/a>, and earned 264.08 ETH in profit. Hope.money employees said:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>&#8220;It is crucial to emphasize that all protocols deployed on http:\/\/Hope.money are independent and will not impact the various other products and protocols currently live on the platform, including HopeCard\u3001HopeSwap and\u00a0$HOPE. We are committed to ensuring the protection of the affected users' rights, and the corresponding funds remain secure.&#8221;<\/p>\n<\/blockquote>\n\n\n\n<p>DeFi aggregator <a href=\"https:\/\/defillama.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">DeFiLlama <span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a>had announced two days prior that it would begin monitoring Hope Lend's smart contracts for data curation. At the time of publication, Hope Lend possessed no discernible protocol assets. <\/p>\n\n\n\n<p>While developers did not specify the cause of the incident, on-chain investigator Spreek claimed that the breach &#8220;seems to be related to WBTC decimals and rounding, similar to the recent Wise Lending hack.&#8221;<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"embed-twitter\"><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">On October 18, 2023, at 11:48:59 AM +UTC, the HopeLend protocol fell victim to a hacker attack. It is important to note that the hacker did not profit from this attack.<br><br>The attack resulted in a loss of approximately 528 ETH, out of which 263.91 ETH were bribed by the frontrunner\u2026<\/p>&mdash; Hope.money\u26a1\ufe0f (@Hope_money_) <a href=\"https:\/\/twitter.com\/Hope_money_\/status\/1714692934719992075?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">October 18, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Hope Lend Ethereum decentralized finance (DeFi) protocol has almost no assets remaining as all 526 Ether in total value locked was emptied in an attack on Oct. 18. According to multiple blockchain security firms, on October 18, two individuals stole from Hope Lend a total of 526 Ether worth $825,357 at publication: a forerunner who [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":61989,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[8138,5643,7183,16815],"class_list":["post-61983","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-ether-3","tag-defi-2","tag-defi-hacks","tag-hope-lend"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/10\/image-60.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/61983","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=61983"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/61983\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/61989"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=61983"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=61983"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=61983"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}