DeFi
Millions Lost After Three DeFi Protocols Hacked in One Weekend
The decentralized finance (DeFi) sector often proves to be a minefield for those looking for the latest opportunities; a fact that was perfectly illustrated by a trio of incidents over the weekend.
Ethereum-based lending platform Dough Finance lost nearly $2 million on Friday in a series of hacks fueled by flash loans. raised the alarm before new attack transactions were identified by ExVul, bringing the total loss to $1.96 million.
Learn more: CertiK Returns Funds on Its Own Terms After Hacking Kraken for $3 Million
The vulnerability was identified as a lack of validation of flash loan “callback” data, according to crypto auditing firms Ancilia And CertiKA flash loan allows a user to access large amounts of cryptocurrency, provided the amount is repaid in the same transaction.
Peckshield followed the flow of funds, demonstrating the funding of the attack via Railgun and the whitening funds via Tornado Cash after the event. Railgun and Tornado Cash are both controversial privacy tools, often used by hackers to cover their tracks.
In what was the platform’s first post on X (formerly Twitter), Dough Finance recognized the hack a few hours later.
After a much-needed break on Saturday, Sunday saw two incidents that illustrate the wide range of attack vectors facing DeFi users.
First, Ethena’s Discord server, transmitter of $3.4 billion The “synthetic dollar” USDe has been compromised. The breach led a seemingly legitimate account to post the promise of “retroactive rewards” for token holders while linking to a malicious URL.
Image taken from ZachXBT’s Telegram channel.
Learn more: Ethena offers 27% on stablecoins, but where does the yield come from?
The suspicious message was reported by ZachXBT via Telegram, and Ethena issued an official warning in a job on X shortly after, which has since been deleted.
The incident highlights the variety of dangers facing DeFi users, which come not only from hacked “smart contracts” containing their crypto, but also from insecurities in existing web infrastructure, such as social media or the project websites themselves.
The ongoing DNS hacks on Squarespace are *even* *worse* than the phishing attacks on major sites.
If an attacker controls a project’s DNS, they also control the project’s email. With this, they can reset passwords and take control of team members’ accounts on other services.
— Daniel Von Fange (@danielvf) July 12, 2024
Learn more: Compound Finance and Celer Network websites compromised by front-end attacks
Last week, a wave of web domain hijacking hit the industry, with Compound Finance, Celer Network, Pendle Finance, and (ironically) Unstoppable Domains among those affected.
To round out the weekend, another lending platform, Minterest, informed the users for whom it was exploited $1.4 million Sunday night. The hack, which took place on Ethereum-rollup Mantle, also appears to have been a flash loan attack, similar to the one who hit Dough Finance on Friday.
Important update from Minterest
Attention Minterest users,
We are currently investigating an exploit on Minterest. As a precaution, we have temporarily suspended certain operations on the Minterest app:
👉 On pause: offer and borrowing
👉 Active: Refund and withdraw…— Minterest (@Minterest) July 14, 2024
Learn more: Sifu’s UwU Lend Reportedly Hacked for $20 Million, Curve’s Egorov Among Those Affected
The attacker address was funded via Tornado Cash on Ethereum, suggesting that the Minterest team hopes The hypothesis that the hacker “performed this exploit as a white hat” may be short-lived.
But it wasn’t all bad. note by Cyvers, a phishing victim, who lost $32 million of ETH staked by Lido over a year ago has started receiving reimbursement.
After being contacted out of the blue via a channel message reading “I’m the guy who took your money…I want to give you the money back,” the victim has today confirmed reception of more than 10 million DAI over the past week.
Got a tip? Send us an email or ProtonMail. For more up-to-date information, follow us on X, Instagram, Blue skyAnd Google Newsor subscribe to our Youtube channel.
DeFi
Pump.Fun is revolutionizing the Ethereum blockchain in terms of daily revenue
The memecoin launchpad saw the largest daily revenue in all of DeFi over the past 24 hours.
Memecoin launchpad Pump.Fun has recorded the highest gross revenue in all of decentralized finance (DeFi) in the last 24 hours, surpassing even Ethereum.
The platform has raised $867,429 in the past 24 hours, compared to $844,276 for Ethereum, according to DeFiLlama. Solana-based Telegram trading bot Trojan was the third-highest revenue generator of the day, as memecoin infrastructure continues to dominate in DeFi.
Pump.Fun generates $315 million in annualized revenue according to DeFiLlama, and has averaged $906,160 per day over the past week.
Income Ranking – Source: DeFiLlama
The memecoin frenzy of the past few months is behind Pump.fun’s dominance. Solana-based memecoins have been the main drug of choice for on-chain degenerates.
The app allows non-technical users to launch their own tokens in minutes. Users can spend as little as $2 to launch their token and are not required to provide liquidity up front. Pump.Fun allows new tokens to trade along a bonding curve until they reach a set market cap of around $75,000, after which the bonding curve will then be burned on Raydium to create a safe liquidity pool.
Pump.Fun generates revenue through accrued fees. The platform charges a 1% fee on transactions that take place on the platform. Once a token is bonded and burned on Raydium, Pump.fun is no longer able to charge the 1% fee.
Ethereum is the blockchain of the second-largest cryptocurrency, Ether, with a market cap of $395 billion. It powers hundreds of applications and thousands of digital assets, and backs over $60 billion in value in smart contracts.
Ethereum generates revenue when users pay fees, called gas and denominated in ETH, to execute transactions and smart contracts.
DeFi
DeFi technologies will improve trading desk with zero-knowledge proofs
DeFi Technologies, a Canadian company financial technology companyis set to enhance its trading infrastructure through a new partnership with Zero Computing, according to a July 30 statement shared with CryptoSlate.
The collaboration aims to integrate zero-knowledge proof tools to boost operations on the Solana And Ethereum blockchains by optimizing its ability to identify and execute arbitrage opportunities.
Additionally, it will improve the performance of its DeFi Alpha trading desk by enhancing its use of ZK-enabled maximum extractable value (MEV Strategies).
Zero knowledge Proof of concept (ZKP) technology provides an additional layer of encryption to ensure transaction confidentiality and has recently been widely adopted in cryptographic applications.
Optimization of trading strategies
DeFi Technologies plans to use these tools to refine DeFi Alpha’s ability to spot low-risk arbitrage opportunities. The trading desk has already generated nearly $100 million in revenue this year, and this new partnership is expected to further enhance its algorithmic strategies and market analysis capabilities.
Zero Computing technology will integrate ZKP’s advanced features into DeFi Alpha’s infrastructure. This upgrade will streamline trading processes, improve transaction privacy, and increase operational efficiency.
According to DeFi Technologies, these improvements will increase the security and sophistication of DeFi Alpha’s trading strategies.
The collaboration will also advance commercial approaches for ZK-enabled MEVs, a new concept in Motor vehicles which focuses on maximizing value through transaction fees and arbitrage opportunities within block production.
Additionally, DeFi Technologies plans to leverage Zero Computing technology to develop new financial products, such as zero-knowledge index exchange-traded products (ETPs).
Olivier Roussy Newton, CEO of DeFi Technologies, said:
“By integrating their cutting-edge zero-knowledge technology, we not only improve the efficiency and privacy of our transactions, but we also pave the way for innovative trading strategies.”
Extending Verifiable Computing to Solana
According to the release, Zero Computing has created a versatile, chain-agnostic platform for generating zero-knowledge proofs. The platform currently supports Ethereum and Solana, and the company plans to expand compatibility with other blockchains in the future.
The company added that it is at the forefront of introducing verifiable computation to the Solana blockchain, enabling complex computations to be executed off-chain with on-chain verification. This development represents a significant step in the expansion of ZKPs across various blockchain ecosystems.
Mentioned in this article
Latest Alpha Market Report
DeFi
Elastos’ BeL2 Secures Starknet Grant to Advance Native Bitcoin Lending and DeFi Solutions
Singapore, Asia, July 29, 2024, Chainwire
- Elastos BeL2 to Partner with StarkWare to Integrate Starknet’s ZKPs and Cairo Programming Language with BeL2 for Native DeFi Applications
- Starknet integration allows BeL2 to provide smart contracts and dapps without moving Bitcoin assets off the mainnet
- Starknet Exchange Validates the Strength of BeL2’s Innovation and Leadership in the Native Bitcoin Ecosystem
Elastos BeL2 (Bitcoin Elastos Layer2) has secured a $25,000 grant from Starknet, a technology leader in the field of zero-knowledge proofs (ZKPs). This significant approval highlights the Elastos BeL2 infrastructure and its critical role in advancing Bitcoin-native DeFi, particularly Bitcoin-native lending. By integrating Starknet’s ZKPs and the Cairo programming language, Elastos’ BeL2 will enhance its ability to deliver smart contracts and decentralized applications (dapps) without moving Bitcoin (BTC) assets off the mainnet. This strategic partnership with Starknet demonstrates the growing acceptance and maturity of the BeL2 infrastructure, reinforcing Elastos’ commitment to market leadership in the evolving Bitcoin DeFi market.
Starknet, developed by StarkWare, is known for its advancements in ZKP technology, which improves the privacy and security of blockchain transactions. ZKPs allow one party to prove to another that a statement is true without revealing any information beyond the validity of the statement itself. This technology is fundamental to the evolution of blockchain networks, which will improve BeL2’s ability to integrate complex smart contracts while preserving the integrity and security of Bitcoin.
“We are thrilled to receive this grant from Starknet and announce our partnership to build tighter integrations with its ZKP technology and the Cairo programming language,” said Sasha Mitchell, Head of Bitcoin Layer 2 at Elastos. “This is a major milestone for BeL2 and a true recognition of the maturity and capabilities of our core technology. This support will allow us to further develop our innovation in native Bitcoin lending as we look to capitalize on the growing acceptance of Bitcoin as a viable alternative financial system.”
A closer integration with Cairo will allow BeL2 to leverage this powerful programming language to enhance Bitcoin’s capabilities and deliver secure, efficient, and scalable decentralized finance (DeFi) applications. Specifically, the relationship with Cairo reinforces BeL2’s core technical innovations, including:
- ZKPs ensure secure and private verification of transactions
- Decentralized Arbitrage Using Collateralized Nodes to Supervise and Enforce Fairness in Native Bitcoin DeFi
- BTC Oracle (NYSE:) facilitates cross-chain interactions where information, not assets, is exchanged while Bitcoin remains on the main infrastructure
BeL2’s vision goes beyond technical innovation and aims to innovate by creating a new financial system. The goal is to build a Bitcoin-backed Bretton Woods system, address global debt crises, and strengthen Bitcoin’s role as a global hard currency. This new system will be anchored in the integrity and security of Bitcoin, providing a stable foundation for decentralized financial applications.
As integration with Starknet and the Cairo programming language continues, BeL2 will deliver further advancements in smart contract capabilities, decentralized arbitration, and innovative financial products. At Token 2049, BeL2 will showcase further innovations in its core technologies, including arbitrators, that will underscore Elastos’ vision for a fairer decentralized financial system rooted in Bitcoin.
About Elastos
Elastos is a public blockchain project that integrates blockchain technology with a suite of redesigned platform components to produce a modern Internet infrastructure that provides intrinsic privacy and ownership protection for digital assets. The mission is to create open source services that are accessible to the world, so developers can create an Internet where individuals own and control their data.
The Elastos SmartWeb platform enables organizations to recalibrate how the Internet operates to better control their own data.
https://www.linkedin.com/company/elastosinfo/
ContactPublic Relations ManagerRoger DarashahElastosroger.darashah@elastoselavation.org
DeFi
Compound Agrees to Distribute 30% of Reserves to COMP Shareholders to End Alleged Attack on Its Governance
Compound will introduce the staking program in exchange for Humpy, a notorious whale accused of launching a governance attack on the protocol, negating a recently adopted governance proposal.
Compound is launching a new staking program for COMP holders as a compromise with Humpy, a notorious DeFi whale accused of launching a governance attack against the veteran DeFi protocol.
On July 29, Bryan Colligan, head of business development at Compound, published a governance proposal outlining plans for a new compound participation product that would pay 30% of the project’s current and future reserves to COMP participants.
Colligan noted that the program was requested by Humpy in exchange for his agreement Proposition 289 — which sought to invest 499,000 COMP worth approximately $24 million into a DeFi vault controlled by Humpy, and which appears to have been forced by Humpy and his associates over the weekend.
“We propose the following staking product that meets Humpy’s stated interests as a recent new delegate and holder of COMP in exchange for the repeal of Proposition 289 due to the governance risks it poses to the protocol,” Colligan said. “The Compound Growth Program…will execute the above commitments, given the immediate repeal of Proposition 289.”
Colligan added that the proposal would expire at 11:59 p.m. EST on July 29. Had Humpy not rescinded Proposition 289, Compound would move forward with it. Proposition 290 — block Humpy using the Compound team’s multi-sig to deploy a new governor contract removing the delegate’s governance power behind Proposition 289.
Hunchback tweeted that Proposition 289 had been repealed a few hours ago. “Glad to have brought Compound Finance back into the spotlight,” they said. added. “StakedComp… finally becomes a yield-generating asset!
Markets reacted favorably to the resolution, with the price of COMP increasing by 6.2% over the past 24 hours, according to CoinGecko.
Attack on governance
Proposition 289 proposed investing 499,000 COMP from the Compound treasury into goldCOMP, a yield-generating vault of the Humpy-linked Golden Boys team.
The proposal passed with nearly 52 percent of the vote on July 28, despite two previous iterations of the proposal being defeated by strong opposition. Can And JulyThe proposals notably asked for only 92,000 COMP, with security researchers warning that any deposit of tokens into the goldCOMP vault would cede their governance power.
In May, Michael Lewellen of Web3 security firm OpenZeppelin, note The first proposal was submitted by a new governance delegate who was suddenly awarded 228,000 COMP by five wallets that got their tokens from the Bybit exchange. Combined with his own tokens, the delegate got 325,333 COMP, which is over 81% of the 400,000 tokens required for a governance proposal to reach quorum.
“We have been alerting the community to the risk that these delegates could support a potential attack on governance,” Lewellen said. “The timing of the new proposal and these recent delegations are suspect.”
Read more: Compound community accuses famous whale of attacking engineering governance
-
News8 months ago
Leeds hospitals trust says finances are “critical” amid £110m deficit
-
News6 months ago
Modiv Industrial to release Q2 2024 financial results on August 6
-
News6 months ago
Volta Finance Limited – Director/PDMR Shareholding
-
News8 months ago
Inventiva reports 2024 First Quarter Financial Information¹ and provides a corporate update
-
DeFi8 months ago
🏴☠️ Pump.Fun operated by Insider Exploit
-
News6 months ago
Apple to report third-quarter earnings as Wall Street eyes China sales
-
Videos8 months ago
“We will enter the ‘banana zone’ in 2 WEEKS! Cryptocurrency prices will quadruple!” – Raoul Pal
-
News6 months ago
Number of Americans filing for unemployment benefits hits highest level in a year
-
Tech8 months ago
Bitcoin’s Correlation With Tech Stocks Is At Its Highest Since August 2023: Bloomberg ⋆ ZyCrypto
-
Tech8 months ago
Everything you need to know
-
Markets8 months ago
Whale Investments in Bitcoin Hit $100 Billion in 2024, Fueling Insane Investor Optimism ⋆ ZyCrypto
-
Videos8 months ago
History will be made tomorrow! The Cryptocurrency Market Will Absolutely Crash – Raoul Pal