{"id":84450,"date":"2024-07-20T13:38:16","date_gmt":"2024-07-20T17:38:16","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=84450"},"modified":"2024-07-20T13:38:19","modified_gmt":"2024-07-20T17:38:19","slug":"rho-markets-faces-7-6m-loss-from-gray-hat-hackers","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/rho-markets-faces-7-6m-loss-from-gray-hat-hackers\/","title":{"rendered":"Rho Markets Faces $7.6M Loss from Gray Hat Hackers"},"content":{"rendered":"\n

Rho Markets experiences a temporary $7.6M loss of user assets due to gray hat hackers.<\/p>\n\n\n\n

\"Rho
Rho Markets Faces $7.6M Loss from Gray Hat Hackers<\/figcaption><\/figure>\n\n\n\n

In an intriguing development, Rho Markets, a lending protocol that operates on the Ethereum layer<\/a> two networks Scroll, suffered a harrowing encounter with grey hat hackers that resulted in the temporary loss of $7.6 million in users' assets.<\/p>\n\n\n\n

Rho Markets announced in an X post on Friday that they had observed some suspicious activity on their platform, which prompted them to suspend all operations and initiate an investigation.<\/p>\n\n\n\n

The crypto lending platform<\/a> guaranteed that most of its token pools were secure and that there was no reason for concern.<\/p>\n\n\n\n

Nevertheless, Cyvers Alerts disclosed that Rho Markets had been compromised, resulting in the theft of $7.6 million in assets from the platform's USDT and USDC token pools.<\/p>\n\n\n\n

They also claimed that the incident was the result of these peculiar actors obtaining access to Rho Markets's oracle control.<\/p>\n\n\n\n

An oracle is a mechanism that enables smart contracts to function efficiently by providing external data to a blockchain, thereby granting them access to real-time information.<\/p>\n\n\n\n

Therefore, the hackers could transfer assets off the DeFi platform<\/a> by manipulating the oracle, which altered the data supplied to the smart contracts on Rho Markets.<\/p>\n\n\n\n

Nevertheless, the hackers promptly transmitted an on-chain message that indicated their readiness to restitute the stolen funds, subject to a specific stipulation. The message was as follows:<\/p>\n\n\n\n

\n

Hello RHO team, our MEV bot has profited from your price oracle misconfiguration. We understand that the funds belong to users and are willing to fully return. But first we would like you to admit that it was not an exploit or a hack, but a misconfiguration on your end. Also, please provide what are you going to do to prevent it from happening again.<\/em><\/p>\n<\/blockquote>\n\n\n\n

This development suggested that Rho Markets was engaging with gray hat hackers, who attack platforms to expose potential system vulnerabilities.<\/p>\n\n\n\n

In contrast to white hat hackers, who are employed by platforms to identify potential security vulnerabilities, gray hat hackers typically operate without the consent of their targets.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Rho Markets announced that they had effectively resolved the security incident, and all user assets were confirmed to be secure just a few hours later.<\/p>\n\n\n\n

Moving forward, they plan to refund their USDC, USDT, and WETH pools\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a> and identify all active supply accounts at the time of the attack.<\/p>\n\n\n\n

Lastly, Rho Markets has announced that they will gradually recommence the borrowing and transfer services on the platform but will ensure that they adhere to stringent security protocols.<\/p>\n","protected":false},"excerpt":{"rendered":"

Rho Markets experiences a temporary $7.6M loss of user assets due to gray hat hackers. In an intriguing development, Rho Markets, a lending protocol that operates on the Ethereum layer two networks Scroll, suffered a harrowing encounter with grey hat hackers that resulted in the temporary loss of $7.6 million in users’ assets. Rho Markets […]<\/p>\n","protected":false},"author":36,"featured_media":84455,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21],"tags":[20676,20674,20675],"class_list":["post-84450","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-7-6m","tag-gray-hat-hackers","tag-rho-markets"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/rho-markets.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/84450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/36"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=84450"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/84450\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/84455"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=84450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=84450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=84450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}