Summary:
The team at the Terra-based Mirror Protocol has averted further potential damages by stopping an ongoing exploit dead on its tracks, which had already resulted in the loss of$2 million in assets.
According to Terra community member FatMan, the crisis was averted by the team who ‘disabled the usage of mBTC, mETH, mGLXY, and mDOT as collateral.’ This in turn locked out the attacker from using his ill-gotten wealth to drain the rest of the pools from the protocol.
The crisis was averted after FatMan and fellow Terra Community members alerted the developer team at Mirror that the protocol was being actively drained with roughly $2 million already stolen.
According to FatMan, the attack was made possible through the utilization of a faulty price oracle that valued LUNC at around 5 UST when it was actually ‘under a micro cent.’ The discrepancy resulted in a scenario where for $1,000, the attacker could load up on $1.3 million in collateral and use it to borrow real assets that can be withdrawn.
FatMan went on to warn that the losses could be much higher once the stock markets opened earlier today. He explained:
So far, the mBTC, mETH, mDOT and mGLXY pools have been drained. In around 12 hours, the market feed will kick in, and the attacker will be able to drain all of the mAsset pools (such as mSPY and mAAPL, mAMZN, etc.) – most of the pools can still be saved.
[Do Kwon and the Mirror Protocol] Please look into fixing the LUNC price oracle, because in a short while, all liquidity pools will be drained, Mirror will accrue irremediable bad debt, and the system will collapse in on itself. This is not the time to be negligent.