Connect with us

Blockchain

Report: Hackers Took Advantage of ETH Mempool Congestion to Steal $8.3M MakerDAO

During the market crash in March, bad actors stole $8.3 million from DeFi protocol Maker DAO. Latest research from analytical company Blocknative suggested that it was made possible by manipulating the Ethereum (ETH) mempool. https://twitter.com/blocknative/status/1286009935390744576 According to the report, the hackers deployed bots to overload the ETH mempool with unusually low-fee transactions. This slowed down transaction confirmation speed and in some cases even resulted in their failure. Ethereum unconfirmed transaction volume chart

Attackers took advantage of DAI features

The attackers took advantage of specific features of DAI, wherein to borrow DAI, a user has to deposit collateral in ETH in the system and to reclaim the collateral assets, the user has to pay back the same amount in DAI. To maintain the market value of DAI, a system was put in place for liquidation of collateral through an auction if the price of the asset falls below a specified level. On Black Thursday ETH’s price nearly halved, triggering the liquidation mechanism. The report further explains:

“When the price of ETH collapsed on March 12, a large number of CDPs [collateralized debt positions] immediately became undercollateralized and eligible for forcible liquidation. MakerDAO and the Ethereum ecosystem are incentivized to operate various Keeper bots in order to ensure a competitive marketplace for liquidated CDP positions. Such liquidations occur in auctions.”

Due to the clogged mempool,  owners of collateral could not get their auction bids through.

“One negative consequence of this congestion were ‘zero bid auctions’ on liquidated MakerDAO CDPs. Of the 3,994 liquidation auctions associated with Black Thursday, 1,462 or 36.6% were won by zero bids. Over a roughly 12 hour period, $8.32 million in aggregated locked CDP value was lost to these zero bid auctions.”

Analysts noted that the cybercriminals conducted a test attack on the network on March 8, four days before the Black Thursday. However, they were unable to find any evidence that the hackers were involved in the market crash. Following the hack, the platform users filed a class action lawsuit for $28 million against the Maker Foundation and several affiliated organizations. Follow us on Twitter and Facebook and join our Telegram channel to know what’s up with crypto and why it’s important.

Avatar

Published

on

During the market crash in March, bad actors stole $8.3 million from DeFi protocol Maker DAO. Latest research from analytical company Blocknative suggested that it was made possible by manipulating the Ethereum (ETH) mempool.

According to the report, the hackers deployed bots to overload the ETH mempool with unusually low-fee transactions. This slowed down transaction confirmation speed and in some cases even resulted in their failure.

Ethereum unconfirmed transaction volume chart

Attackers took advantage of DAI features

The attackers took advantage of specific features of DAI, wherein to borrow DAI, a user has to deposit collateral in ETH in the system and to reclaim the collateral assets, the user has to pay back the same amount in DAI.

To maintain the market value of DAI, a system was put in place for liquidation of collateral through an auction if the price of the asset falls below a specified level. On Black Thursday ETH’s price nearly halved, triggering the liquidation mechanism. The report further explains:

“When the price of ETH collapsed on March 12, a large number of CDPs [collateralized debt positions] immediately became undercollateralized and eligible for forcible liquidation. MakerDAO and the Ethereum ecosystem are incentivized to operate various Keeper bots in order to ensure a competitive marketplace for liquidated CDP positions. Such liquidations occur in auctions.”

Due to the clogged mempool,  owners of collateral could not get their auction bids through.

“One negative consequence of this congestion were ‘zero bid auctions’ on liquidated MakerDAO CDPs. Of the 3,994 liquidation auctions associated with Black Thursday, 1,462 or 36.6% were won by zero bids. Over a roughly 12 hour period, $8.32 million in aggregated locked CDP value was lost to these zero bid auctions.”

Analysts noted that the cybercriminals conducted a test attack on the network on March 8, four days before the Black Thursday. However, they were unable to find any evidence that the hackers were involved in the market crash.

Following the hack, the platform users filed a class action lawsuit for $28 million against the Maker Foundation and several affiliated organizations.

Follow us on Twitter and Facebook and join our Telegram channel to know what’s up with crypto and why it’s important.

Subscribe to our Newsletter

Source: https://forklog.media/report-hackers-took-advantage-of-eth-mempool-congestion-to-steal-8-3m-makerdao/

Continue Reading

Blockchain

Avatar

Published

on

Source:

Continue Reading

Blockchain

Avatar

Published

on

Source:

Continue Reading

Blockchain

Avatar

Published

on

Source:

Continue Reading
Blockchain22 mins ago

Blockchain22 mins ago

Blockchain22 mins ago

Blockchain22 mins ago

Blockchain22 mins ago

Blockchain23 mins ago

Blockchain23 mins ago

Blockchain23 mins ago

Blockchain23 mins ago

Blockchain23 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Saas27 mins ago

Blockchain41 mins ago

XRP, Synthetix, Crypto.com Coin Price Analysis: 23 November

Blockchain41 mins ago

CipherTrace will Anonymität von Privacy Coins an den Kragen

Private Equity41 mins ago

FinTech: Western Union Acquires 15% Of Saudi Fintech stc pay For $200M

Press Releases42 mins ago

The Film Detective Announces World Premiere of Salem and The Scarlet Letter (2020)

Press Releases48 mins ago

ThoughtWorks Honored 2020 Asia-Pacific WEPs Awards by UN Women

Press Releases52 mins ago

Seacoast Bank Named to Fortune’s ‘100 Fastest-Growing Companies’ List for Third Consecutive Year

Press Releases52 mins ago

ARUP Laboratories Announces the Availability of a Combined Test for COVID-19, Influenza, and RSV

Press Releases53 mins ago

Anunciados los ganadores de los 2020 “IMTA Mountain Tourism Awards”

Press Releases54 mins ago

New Financial Factors Regulation Blocks Participant Requested Investments

Blockchain57 mins ago

Here’s why the Pickle Finance hack was different from the rest

Blockchain1 hour ago

Csak COVID-tanúsítvánnyal kaphatnánk vissza a normális életünket

Press Releases1 hour ago

Dr. Rajamannan of Most Sacred Heart of Jesus Cardiology Holds Virtual Press Conference on Outpatient Therapies for Covid-19

Press Releases1 hour ago

Alertus Technologies Announces Upcoming Virtual Seminar to Help Organizations Navigate the New COVID-19 Landscape

Startup1 hour ago

Crypto Project Gnosis Launches Futarchy-Based Governance Organization

Private Equity1 hour ago

European insurers gear up to do deals

Blockchain1 hour ago

AAX: The institutional-grade crypto derivatives platform celebrates its anniversary

Startup1 hour ago

Skype co-founder Jaan Tallinn has invested over $130M in more than 100 tech startups; now betting big on London-based AI startup Faculty.ai 

Blockchain1 hour ago

Can Falsified Lab Tests be Cured Through Blockchain?

Press Releases2 hours ago

Panaceutics Nutrition Names Veteran Biotech Exec Adam Monroe New CEO

Private Equity2 hours ago

Weekly Wrap, November 23rd, 2020; DPI, CDC, EBRD launch pharma platform, OMAI’s latest education deal, AIIM backs MetroFibre Networx and more…

Trending