Ethereum
$238.21 5.72%
ETH · 6d

Balancer to compensate victims of $450,000 exploits and reward white hat hacker

Ethereum-based market-making protocol Balancer has announced that it will compensate users who lost their tokens in a protocol attack associated with two deflationary tokens.

The protocol operator will also reward Ankur Agrawal of Hex Capital, "the maximum amount" available in its current bug bounty program, since he flagged the bug to the Balancer team on May 6.

"The bug bounty report by [Agrawal] describes in detail the attack that happened. Our team however did not think it would be a practical attack because of the enormous amounts of funds and also gas we thought would be required for bringing the balance of the deflationary token to near 0 in a single atomic transaction," said Balancer.

Previously, Balancer had declined to pay out a bug bounty because "they determined that it was not a critical bug," Agrawal told The Block. Balancer CEO Fernando Martinelli also admitted in a newly published blog post that the team made a mistake thinking that the bug Agrawal flagged was not a practical attack. 

"The bug bounty report describes in detail the attack that happened. Our team however did not think it would be a practical attack because of the enormous amounts of funds and also gas we thought would be required for bringing the balance of the deflationary token to near 0 in a single atomic transaction," Martinelli stated. 

However, what the Balancer team did not account for is flash loans, or loans that need to be paid back within one transaction. The attacker was able to take out flash loans from dYdX to fund the series of transactions required for this attack. 

The attack itself took advantage of the fact that deflationary tokens STONK and STA both charge transfer fees when trading. At the same time, their associated Balancer pools do not immediately account for those fees. It means that the pool balance will show more STONK or STA than the actual number, leaving attackers opportunities to respectively trade STONK and ST...

Continue on finance.yahoo.com
Recent news
ETH +5.72% · theunionjournal.com · 2h

3 new sectors where blockchain can disrupt

Managed services giant KPMG said last year blockchain had moved beyond the "hype phase", shifting the focus of the technology far from often notably zany proof