{"id":68116,"date":"2024-01-03T03:43:21","date_gmt":"2024-01-03T07:43:21","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=68116"},"modified":"2024-01-03T03:43:23","modified_gmt":"2024-01-03T07:43:23","slug":"radiant-capital-suspends-arbitrum-markets-after-flash-loan-attack","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/radiant-capital-suspends-arbitrum-markets-after-flash-loan-attack\/","title":{"rendered":"Radiant Capital Suspends Arbitrum Markets After Flash Loan Attack"},"content":{"rendered":"\n

In response to allegations of a $4.5 million attack affecting one of its newly created USDC Coin<\/a> (USDC) markets, Radiant Capital has suspended its lending and borrowing markets on Arbitrum.<\/p>\n\n\n\n

\"Radiant
Radiant Capital Suspends Arbitrum Markets After Flash Loan Attack<\/figcaption><\/figure>\n\n\n\n

“Today, we received a report of an issue with the newly created native USDC market on Arbitrum,” Radiant stated in a post on X (formerly Twitter) dated January 3. As the post continued, Radiant developers and the broader cybersecurity community confirmed the report.<\/p>\n\n\n\n

\n

Today, we received a report of an issue with the newly created native USDC market on Arbitrum. After validation by Radiant developers and the wider Web 3 security community, the Radiant DAO Council paused lending\/borrowing markets on Arbitrum temporarily while this is\u2026<\/p>— Radiant Capital (@RDNTCapital) January 3, 2024\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a><\/blockquote>

Beosin, a firm specializing in blockchain security, referred to the flaw as a “rounding error” in the codebase, “which resulted in a cumulative precision error,” thereby committing a flash loan attack<\/a>.<\/p>\n\n\n\n

This ultimately enabled the “assailant to generate profits via recurrent deposits and withdrawals,” the source wrote in a post on X on January 3.<\/p>\n\n\n\n

PeckShield previously characterized the issue as the result of a “known rounding issue” in the existing Compound\/Aave codebase in a January 2 post.<\/p>\n\n\n\n

It further stated, “The underlying cause is not novel: It exploits a time window during which a lending market's (a forked version of the popular Compound\/Aave) market becomes active.”<\/p>\n\n\n\n

\n

Radiant Capital @RDNTCapital<\/use><\/svg><\/span><\/a> was under a flash loan attack with a loss of $4.5M.
Attacker: https:\/\/t.co\/L7fXlF8VXP<\/use><\/svg><\/span><\/a>

The attacker manipulated the index parameter (which later served as a denominator) to become extremely large. The contract has a rounding issue in its\u2026 pic.twitter.com\/8AdY7pjaKE<\/use><\/svg><\/span><\/a><\/p>— Beosin Alert (@BeosinAlert) January 3, 2024<\/use><\/svg><\/span><\/a><\/blockquote>

Data from Arbitrum block explorer Arbiscanner<\/use><\/svg><\/span><\/a> indicates that the perpetrator successfully stole $4.5 million worth of Ether from the protocol.<\/p>\n\n\n\n

Subsequently, Radiant has suspended lending and borrowing activities on Arbitrum, assuring investors that no further funds are available at this time at risk. It secured regular operations following the conclusion of the investigation and guaranteed a comprehensive postmortem.<\/p>\n\n\n\n

Radiant added, “As a reminder until the markets resume trading on Arbitrum, no action can be taken.”<\/p>\n\n\n\n

In the interim, fraudulent Radiant Capital accounts have already inundated Crypto X with deceptive links to assist users in rescinding approvals.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Radiant Capital is a decentralized lending and borrowing protocol that utilizes LayerZero technology<\/a> to enable cross-chain functionality. According to DefiLlama, the protocol presently has an estimated $300,15,000,000 locked value.<\/p>\n","protected":false},"excerpt":{"rendered":"

In response to allegations of a $4.5 million attack affecting one of its newly created USDC Coin (USDC) markets, Radiant Capital has suspended its lending and borrowing markets on Arbitrum. “Today, we received a report of an issue with the newly created native USDC market on Arbitrum,” Radiant stated in a post on X (formerly […]<\/p>\n","protected":false},"author":12,"featured_media":68126,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[17742,16721,17741,1106],"class_list":["post-68116","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-arbitrum-markets","tag-flash-loan-exploit","tag-radiant-capital","tag-usdc"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/01\/image-17.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/68116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=68116"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/68116\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/68126"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=68116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=68116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=68116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}