Share this article
DeFi Protocol Ankr to Reimburse Users Affected by $5M Exploit
The attacker was able to mint 6 quadrillion aBNBc tokens, which was eventually turned into roughly 5 million USDC.
By Sam Reynolds
Updated Dec 2, 2022, 7:29 p.m. Published Dec 2, 2022, 6:08 a.m.
Decentralized finance (DeFi) protocol Ankr said it will reimburse the users impacted by the $5 million exploit that occurred on its platform earlier Friday.
"We will take a snapshot and reissue ankrBNB to all valid aBNBc holders before the exploit. The ankrBNB token will continue to be redeemable, while aBNBc and aBNBb will no longer be redeemable," Ankr said in a tweet after the exploit.
STORY CONTINUES BELOW
Mis geen enkel verhaal.Abonneer je vandaag nog op de Crypto Daybook Americas Nieuwsbrief. Bekijk Alle Nieuwsbrieven
The team at Ankr has assessed the damage and it is max 5M USD worth of BNB from the liquidity pools.
— Ankr (@ankr) December 2, 2022
We are currently working hard to resolve this issue efficiently and we would like to propose the following to address the current situation:
Ankr, which called itself the first "node-as-a-service" platform, had suffered the multimillion-dollar exploit due to a bug in its code that allowed for unlimited minting of its token.
After minting the quadrillions of aBNBc token, the attacker was able to swap 20 trillion of them for BNB, then move those to crypto mixer Tornado Cash. The attacker then swapped the BNB tokens for 5 million USDC.
Because the hacker almost completely drained the aBNBc liquidity pools on PancakeSwap and ApeSwap, the token lost nearly 99% of its value, according to CoinGecko data.
According to security research firm PeckShield, the code behind the Ankr contract allows any user to mint an unlimited amount of the protocol’s reward-bearing staking tokens without any sort of verification. This allowed the attacker to mint six quadrillion of the aBNBc token.
Ankr tweeted that all staked assets within the protocol are currently safe. Binance CEO Changpeng Zhao tweeted that his exchange had frozen $3 million that had been sent to his exchange by the hackers.
Secondary exploit
On-chain analyst firm Lookonchain reported that one opportunistic trader was able to cash in on the exploit and turn 10 BNB ($2,885) into 15.5 million BUSD. The trader did this by taking advantage of DeFi lending protocol Helio, which did not have up-to-date pricing on aBNBc post-crash.
The trader was also able to use the pre-crash pricing for aBNBc to borrow $16 million of the little-traded HAY stablecoin and convert that into BUSD. Since then, the HAY stablecoin has been tossed off its peg, hitting a low of 20 cents, and is now recovering, according to CoinMarketCap, with a price of 77 cents.
UPDATE (Dec. 2, 07:35 UTC): Added comment from Binance's CEO.
UPDATE (Dec. 2, 12:49 UTC): Updates headline and story to include Ankr response, new details.
Meer voor jou
Solana CME Futures Fell Short of BTC and ETH Debuts, but There's a Catch
When adjusted for asset market capitalization SOL's relative futures volume looks better, K33 Research noted.
Wat u moet weten:
- Solana's SOL futures began trading on the Chicago Mercantile Exchange (CME) on Monday, with a notional daily volume of $12.3 million and $7.8 million in open interest, significantly lower than the debuts of bitcoin (BTC) and ether (ETH) futures.
- Despite the seemingly lackluster debut, when adjusted to market value, SOL's first-day figures are more in line with BTC's and ETH's, according to K33 Research.
- Despite the bearish market conditions, the launch of CME SOL futures offers new ways for institutions to manage their exposure to the token, said Joshua Lim of FalconX.
Top Stories
