{"id":570480,"date":"2022-04-28T10:16:52","date_gmt":"2022-04-28T09:16:52","guid":{"rendered":"https:\/\/en.ethereumworldnews.com\/?p=570480"},"modified":"2022-04-28T10:17:05","modified_gmt":"2022-04-28T09:17:05","slug":"deus-finance-flash-loan-exploit","status":"publish","type":"post","link":"https:\/\/en.ethereumworldnews.com\/deus-finance-flash-loan-exploit\/","title":{"rendered":"DEUS Finance Experiences Another Flash Loan Exploit, Loses Over $13M"},"content":{"rendered":"\n<ul><li>The hacker exploited the USDC\/DEI pool and stole $13.4 million.<\/li><li>This is DEUS Finance\u2019s second flash loan exploit in under two months, the first occurring in Mar. 2022.<\/li><li>Flash loan exploits and hacks, in general, continue to be a threat to the DeFi market.<\/li><\/ul>\n\n\n\n<p>DeFi infrastructure protocol DEUS Finance has suffered yet another flash loan exploit, according to blockchain security and data analytics company PeckShield. The latter tweeted on April 28 that the protocol had lost at least $13.4 million. It notes that the actual theft may be larger.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">The <a href=\"https:\/\/twitter.com\/DeusDao?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">@DeusDao<\/a> was exploited today in <a href=\"https:\/\/t.co\/USKNHhXeid\" rel=\"nofollow\">https:\/\/t.co\/USKNHhXeid<\/a> with ~$13.4M gain for the hacker (The protocol loss may be larger).<\/p>&mdash; PeckShield Inc. (@peckshield) <a href=\"https:\/\/twitter.com\/peckshield\/status\/1519530463337250817?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">April 28, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>The hacker manipulated the price oracle reading from the USDC\/DEI pair. They then used the manipulated price of DEI to borrow and drain the pool.<\/p>\n\n\n\n<p>DEUS Finance has experienced flash loan exploits before, losing approximately <a href=\"https:\/\/en.ethereumworldnews.com\/deus-finance-loses-over-3-million-in-a-hack\/\" target=\"_blank\" rel=\"noreferrer noopener\">$3 million<\/a> in an attack on March 14. On that occasion, the protocol lost 200,000 DAI and over 1,108 ETH. Both attacks \u2014 the latest attack and the one in March \u2014 used the same technique.<\/p>\n\n\n\n<p>The funds have been sent through Tornado Cash, which makes it hard to trace the funds. It has been sent to <a href=\"https:\/\/etherscan.io\/address\/0x701428525cbac59dae7af833f19d9c3aaa2a37cb\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">this Ethereum address<\/a>, and the blockchain data shows it being routed through Tornado Cash.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img width=\"1024\" height=\"386\" src=\"https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_-1024x386.png\" alt=\"DEUS Finance attacker routing ETH using Tornado Cash\" class=\"wp-image-570481\" srcset=\"https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_-1024x386.png 1024w, https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_-300x113.png 300w, https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_-770x290.png 770w, https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_-269x101.png 269w, https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_-746x281.png 746w, https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_-1376x519.png 1376w, https:\/\/en.ethereumworldnews.com\/wp-content\/uploads\/2022\/04\/tornado.cash_.png 1413w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" title=\"\"><figcaption>DEUS Finance attacker routing ETH using Tornado Cash: <a href=\"https:\/\/etherscan.io\/address\/0x701428525cbac59dae7af833f19d9c3aaa2a37cb\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Etherscan<\/a><\/figcaption><\/figure><\/div>\n\n\n\n<p>The team has commented on the incident, saying that the developers are working on it. They state that user funds are safe, and no users were liquidated. The DEI peg has been restored, and DEI lending has been suspended.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">The dev team is working on the DEI situation. <br><br>1. User funds are safe. No users were liquidated.<br>2. DEI lending has been temporarily halted.<br>3. <a href=\"https:\/\/twitter.com\/search?q=%24DEI&amp;src=ctag&amp;ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">$DEI<\/a> peg has been restored.<br><br>More details to follow.<\/p>&mdash; DEUS Finance DAO (@DeusDao) <a href=\"https:\/\/twitter.com\/DeusDao\/status\/1519574219419496449?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">April 28, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>These incidents will do DEUS Finance no assistance, especially given that it\u2019s the second kind of attack in just over a month. Flash loan exploits are among the most common types of attacks in the market, more of which can be expected in the future.<\/p>\n\n\n\n<h2>DeFi Remains Prime Target for Hackers<\/h2>\n\n\n\n<p>The DeFi space has always been prey for hackers, as it sees a lot of capital inflow, as well as new investors who lack the acumen to invest in the space safely.<\/p>\n\n\n\n<p>Sometimes, it is a development mistake, as in the case of <a href=\"https:\/\/en.ethereumworldnews.com\/largest-cryptocurrency-hack-of-2022-so-far-more-than-321m-stolen-from-wormhole-bridge\/\" target=\"_blank\" rel=\"noreferrer noopener\">the Wormhole bridge hack<\/a>, which resulted in $321 million stolen \u2014 the biggest hack of 2022. Other times, it is a rug pull that attracts new investors who are looking to make a profit quickly.<\/p>\n\n\n\n<p>As such, teams are now paying more attention to audits and ensuring airtight security. Bug bounties and insurance programs are other areas that are also seeing strong growth.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The hacker exploited the USDC\/DEI pool and stole $13.4 million. This is DEUS Finance\u2019s second flash loan exploit in under two months, the first occurring in Mar. 2022. Flash loan exploits and hacks, in general, continue to be a threat to the DeFi market. DeFi infrastructure protocol DEUS Finance has suffered yet another flash loan exploit, according to blockchain security and data analytics company PeckShield. The latter tweeted on April 28 that the protocol had lost at least $13.4 million. [&hellip;]<\/p>\n","protected":false},"author":52,"featured_media":570485,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[947,2,828],"tags":[83,1464,7092,108484,1322,108485,2889,108437],"_links":{"self":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/570480"}],"collection":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/users\/52"}],"replies":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=570480"}],"version-history":[{"count":2,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/570480\/revisions"}],"predecessor-version":[{"id":570487,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/570480\/revisions\/570487"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media\/570485"}],"wp:attachment":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=570480"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=570480"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=570480"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}