MIM Loses Peg After $6.5 Million Exploit on Abracadabra Ethereum Cauldrons
Decentralized crypto lending platform Abracadabra.cash used to be hit by an exploit on Tuesday, ensuing in a $6.5 million loss to the protocol.
The exploit used to be flagged by blockchain security agency PeckShield, which infamous that the attacker funded the exploit with 1 ETH from Twister Money.
The initial loss for @MIM_Spell is ~$6.5M, comprising 2.74K $ETH.
The exploiter at the start assign funded the attack with 1 $ETH from #TornadoCash. pic.twitter.com/lPENOLZA2I— PeckShield Inc. (@peckshield) January 30, 2024
Magic Web Money (MIM), the stablecoin tied to the protocol flash crashed to $0.76 after the exploit. At the time of writing, the stablecoin used to be soundless procuring and selling below its U.S. buck-peg at spherical $0.98.
The attacker managed to trick definite Abracadabra’s isolated lending pools on Ethereum, known as “cauldrons,” and long-established a nested series of clear contracts to loop the Abracadabra Degenbox’s “borrow” and “repay” functions, essentially based mostly on diagnosis from Arkham.
The hacker swapped $7M of MIM for a total of $6.3M in ETH, incurring spherical 10% slippage after they dumped it on Curve.
They’re now holding the ETH in two addresses:
0x40d5FFA20fC0dF6bE4D9991938dAa54E6919c714 ($4.15M ETH)
0xbD12D6054827ae3fc6D23B1aCf47736691b52Fd3 ($2.16M ETH) pic.twitter.com/s3ovPoWZBX— Arkham (@ArkhamIntel) January 30, 2024
Meanwhile blockchain security agency CertiK infamous on X that early indications pointed to a “rounding error” being the foundation motive at the succor of the exploit.
The MIM group acknowledged the exploit and mentioned the protocol’s decentralized self sustaining organization (DAO) used to be attempting to stabilize the rate of the stablecoin of MIM through a buyback and burn program, most likely explaining why MIM is now procuring and selling closer to its peg.
Around 10 hours later, on the opposite hand, the group issued an update urging users to revoke all approvals to the clear contract to prevent a lack of funds.
As a result of the contemporary exploit, MIM urges all users to revoke all approvals to prevent lack of funds 🚨
We recommend all users to learn approvals straight while we review.
Test exposure to the exploit and revoke now 🔒
Revoke Now ⤵️https://t.co/hlutksQcdX
— 🧙🏼♂️ (@MIM__Spcll) January 30, 2024
MIM has misplaced its peg sooner than, fluctuating to a low of $0.95 after the collapse of FTX in November 2022, provided that FTX’s native token FTT used to be the very top collateral token backing the stablecoin. MIM also destabilized after the collapse of the Terra ecosystem earlier that year.
Source credit : unchainedcrypto.com