• Press Releases
    • Submit a press release
    • Read All
  • Advertise
  • Contact us
Bitcoinist.com
No Result
View All Result
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • Gambling
      • Bitcoin Casinos
      • Real Money Slots
      • Online Casino Real Money
      • Casino utan svensk licens
      • Non Gamstop Casinos
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
  • Industry
    • Industry News
    • Press Releases
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
    • Bitcoin Casinos – Where, What and How to Play
  • Events
  • Casinos
  • Play Games
  • Play Casino Games
  • Best crypto casino
Breaking News: BREAKING: Terra Founder Do Kwon's Extradition To The US Approved
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • Gambling
      • Bitcoin Casinos
      • Real Money Slots
      • Online Casino Real Money
      • Casino utan svensk licens
      • Non Gamstop Casinos
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
  • Industry
    • Industry News
    • Press Releases
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
    • Bitcoin Casinos – Where, What and How to Play
  • Events
  • Casinos
  • Play Games
  • Play Casino Games
  • Best crypto casino
Bitcoinist.com
No Result
View All Result
Breaking News: BREAKING: Terra Founder Do Kwon's Extradition To The US Approved
Hackers Ethereum

How This Ethereum Lending Platform Was Attacked And Made A Deal With The Hacker

Reynaldo Marquez by Reynaldo Marquez
1 year ago
in Ethereum
0

Ethereum lending platform XCarnival confirmed a bad actor stole $3.8 million or 3,087 ETH. According to a report from on-chain security firm Peck Shield, a hacker exploited a vulnerability on the protocol’s smart contract by borrowing ETH and creating “multiple pledge orders to pledge BAYC (Bored Ape Yacht Club NFTs) many times”.

Related Reading | Morgan Creek Said To Be In Bid To Secure $250-M To Counter FTX BlockFi Bailout

XCarnival operates as a non-fungible token (NFT) lending pool. The platform enables NFT holders to deposit their assets in exchange for liquidity. This process involves three smart contracts: an NFT manager, a P2Controller to manage lending restrictions, and fund storage, as stated by another security firm Go+ Security.

The hacker bought item 5110 from the popular Bored Ape Yacht Club NFT collection on OpenSea. Later, he deposited this asset on XCarnival and conducted an attack to “use the same NFT for borrowing”.

In other words, the attacker was able to pledge the NFT, borrowed ETH, and then remove the NFT without paying back the loan. The bad actor completed this process several times until the pool was drained.

Go+ Security explained that the hacker created a Master smart contract and several “slaves” smart contracts to conduct the attack:

Then Slave 5338 withdrew the NFT and sent it back to Master, who then repeated this process with other Slaves. In this way they created many orderIDs, which can later be used as lending credentials. But bugged xNFT contract didn’t revoke the credential after withdrawing.

XCarnival’s operated with a vulnerability on its smart contracts, mentioned above, which enable the attack if the user stays within a certain. Go+ Security added on the attack and the smart contract vulnerability: “Collateral is still valid after withdrawing. This is a very simple & naive bug in contract implementation.”

In light of the successful attack, the Ethereum-based NFT lending protocol decided to offer the hacker a deal.

Ethereum Platform Makes Deals With Its Attacker

According to its official Twitter account, the XCarnival offered the hacker a 1,500 ETH or $1.8 million bounty. Half the stolen funds. The attacker only needed to return the other half and they got to keep the money and suffer no legal consequences.

The team behind the platform confirmed that the hacker agreed to the terms. Half the stolen funds were returned to the pool. The Ethereum lending platform claims “security agencies have tentatively determined the hacker’s geographic location”.

This statement seems to hint at possible legal consequences for the attacker, but the team behind this project is yet to provide more information.

7/8 Funds returnedhttps://t.co/oRwSsGgT6U pic.twitter.com/YgXZ9DTj03

— Tal Be'ery (@TalBeerySec) June 27, 2022

This is not the first time a hacker agrees to return a portion or the full amount of the stolen funds. Some hackers attack decentralized finance (DeFi) platforms and often held the money hostage until they receive payment for what they considered to be a “service”. Other projects are less lucky and pay the ultimate price.

Related Reading | Harmony Dangles $1M Reward For Return Of $100M Stolen Funds – Is It Enough?

At the time of writing, Ethereum (ETH) trades at $1,180 with a 3% loss in the last 24 hours.

Ethereum ETH ETHUSD
ETH moving sideways on the 4-hour chart. Source: ETHUSD Tradingview
ShareTweetShareShare

Sign Up for Our Newsletter!

For updates and exclusive offers enter your email.

I consent to my submitted data being collected and stored.

Reynaldo Marquez

Reynaldo Marquez

As an editor at NewsBTC, Reynaldo is an experienced journalist passionate about all things crypto. Reynaldo has interviewed key industry leaders, and created unique pieces analyzing the promise of crypto as the next frontier for an economic and social transformation of humanity. Since 2018, he has been at the forefront of the industry, closely following every major development and analyzing critical events at the heart of the crypto industry. With a keen eye for detail and an unwavering commitment to excellence, Reynaldo has been instrumental in bringing the latest news and insights to the crypto community. Outside of work, Reynaldo enjoys lifting weights and literature, which he believes gives him a unique perspective into the world of crypto. As an aspiring trader, he is always looking for new opportunities to explore and believes that crypto holds the key to unlocking the future of finance.

Related Posts

Ethereum (ETH)

Ethereum’s Breakthrough Moment: Experts Predict Trillions In Inflow From Upcoming Spot ETFs

4 days ago
Ethereum

Ethereum Metaverse Game Immortalizes Rapper ‘The Notorious B.I.G.’

4 days ago
Ethereum

Why Did Ethereum Price Reach A New Yearly High?

5 days ago
Ethereum Whale

Ethereum’s Top 10 Whales Now Control 41 Million ETH, A New ATH

1 week ago
Ethereum

Ethereum Exodus: Validators Jump Ship – What’s Driving The Mass Departure?

1 week ago
Ethereum roadmap Vitalik Buterin

Ethereum Founder Buterin Discloses Plans For Major Changes

2 weeks ago
Please login to join discussion

Premium Partners

Premium Casino Partners

Top Casinos

Trust Dice
Trust Dice
Punt Casino
Punt Casino
mBit
mBit
Inmerion
Inmerion

Press Releases

  • Weekend Crypto Watch: Bitcoin, Dogecoin & Borroe...

    3 hours ago
  • Four Reasons Why Investors Have Piled Into $CHMPZ After...

    4 hours ago
  • Decoding Market Strategies With Binance Trade Data

    8 hours ago
  • Ethereum (ETH) and Retik Finance (RETIK) are the only two...

    8 hours ago
  • RETIK VS MATIC – Here’s why the utility of DeFi...

    8 hours ago

Bitcoin news portal providing breaking news, guides, price analysis about decentralized digital money & blockchain technology.

Bitcoin

  • News
  • Price
  • Businesses
  • Acceptance
  • Technology
  • Investment
  • Regulation
  • Reviews

Altcoins

  • News
  • Price
  • Ethereum
  • Ripple
  • Litecoin
  • EOS
  • NAGA

Categories

  • Blockchain
  • Security
  • FinTech
  • Technology
  • Trending
  • Breaking News
  • Press Releases
  • How to

Pages

  • Contact us
  • Editorial Policy
  • Advertise
© 2023 Bitcoinist.com. All Rights Reserved.
  • Bitcoin
    • News
    • Price
    • Businesses
    • Acceptance
    • Technology
    • Investment
    • Regulation
    • Reviews
    • Gambling
      • Bitcoin Casinos
      • Real Money Slots
      • Online Casino Real Money
      • Casino utan svensk licens
      • Non Gamstop Casinos
    • All Bitcoin News
  • Altcoins
    • News
    • Price
    • Ethereum
    • Ripple
    • Litecoin
    • EOS
    • NAGA
    • All Altcoin News
  • Tech
    • Blockchain
    • Security
    • FinTech
  • Industry
    • Industry News
    • Press Releases
  • How to
    • Buy gift cards/mobile Top Ups with Cryptos
    • What Is Bitcoin?
    • Best Bitcoin Wallet
    • Bitcoin vs Ethereum
    • Why Use Blockchain Technology?
    • Bitcoin Cash ABC vs. Bitcoin Cash SV
    • How to Buy Cryptocurrency
    • Bitcoin Mining
    • Best Bitcoin Brokers
    • Best Bitcoin Forex Brokers
    • How To Earn Bitcoin
    • What is Facebook Libra?
    • Ripple and XRP: The Complete Guide
    • Bitcoin Casinos – Where, What and How to Play
  • Events
  • Casinos
  • Play Games
  • Play Casino Games
  • Best crypto casino

© 2023 Bitcoinist. All Rights Reserved.

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy Center or Cookie Policy.