Cointime

Download App
iOS & Android

BlockSec: Hope.money under attack due to precision loss issue

BlockSec stated on social media that Hope.money on Ethereum has been attacked due to precision loss issues. There have been several such attacks recently, and developers are advised to investigate and conduct self-examination in a timely manner. BlockSec stated that the attacker first opened a position on HopeLend, borrowed 2,000 WBTC through flash loans, and added flash loan fees to the liquidity index of the reserve fund through the pool contract's flash loan function. The attacker manipulated the liquidity index of the hEthWBTC contract (from 1e27 to 7,560,000,001e27), resulting in a final precision loss. Then, the attacker borrowed a large amount of assets from other markets. Finally, due to the precision loss, the attacker was able to redeem all WBTC collateral.

Comments

All Comments

Recommended for you