Scan to download
BTC $68,529.53 +3.73%
ETH $2,059.87 +7.45%
BNB $631.49 +5.64%
XRP $1.42 -4.56%
SOL $81.67 -4.53%
TRX $0.2795 -0.47%
DOGE $0.0974 -3.83%
ADA $0.2735 -4.22%
BCH $495.97 -1.68%
LINK $8.64 -2.97%
HYPE $28.98 -1.81%
AAVE $122.61 -3.42%
SUI $0.9138 -6.63%
XLM $0.1605 -4.62%
ZEC $260.31 -8.86%
BTC $68,529.53 +3.73%
ETH $2,059.87 +7.45%
BNB $631.49 +5.64%
XRP $1.42 -4.56%
SOL $81.67 -4.53%
TRX $0.2795 -0.47%
DOGE $0.0974 -3.83%
ADA $0.2735 -4.22%
BCH $495.97 -1.68%
LINK $8.64 -2.97%
HYPE $28.98 -1.81%
AAVE $122.61 -3.42%
SUI $0.9138 -6.63%
XLM $0.1605 -4.62%
ZEC $260.31 -8.86%

pegged

Saga paused its on-chain operations after losing $7 million in an attack, and the stablecoin depegged to $0.75

Layer-1 blockchain protocol Saga has urgently paused its Ethereum-compatible Saga EVM chainlet after experiencing an attack that resulted in a loss of approximately $7 million. The attack led to unauthorized funds being cross-chain transferred and exchanged for ETH, causing its dollar-pegged stablecoin, Saga Dollar, to de-peg, with the price dropping to as low as $0.75. The Saga team stated that the chain was paused at block height 6,593,800.Preliminary investigations indicate that the incident involved a series of contract deployments, cross-chain operations, and liquidity withdrawals, but there was no consensus failure, validator compromise, or private key leakage; the overall structure of the Saga mainnet remains secure. The impact was not limited to Saga Dollar; its stablecoins Colt and Mustang were also affected. The team has identified the addresses involved in the attack and is working with exchanges and cross-chain bridges to blacklist these addresses. The chain will remain paused until a complete security audit and post-mortem analysis are published.On-chain data shows that Saga's TVL plummeted from approximately $37 million to $16 million within 24 hours, a decrease of about 55%. Some security researchers speculate that the attack may be related to the "infinite minting" of stablecoins using cross-chain mechanisms, while others believe that the possibility of private key leakage cannot be ruled out, but the officials have not yet confirmed the specific attack vector.

Uniswap "pegged" exchange Bunni hacked, losing over $8.4 million

ChainCatcher news, another security incident has occurred in the decentralized finance (DeFi) sector. The exchange Bunni, built on Uniswap, has been hacked, resulting in a loss of $8.4 million. According to the official Bunni website, the application aims to "maximize the profits of liquidity providers under all market conditions," but today's loss is contrary to that goal.Previously, according to the crypto security auditing firm BlockSec Phalcon (@Phalcon_xyz), a suspicious transaction targeting the Bunni protocol (@bunni_xyz) contract was detected on the Ethereum network, causing a loss of approximately $2.3 million. About two hours later, the Bunni team acknowledged the incident and suspended their contracts across all networks. Subsequently, more auditing firms got involved in the investigation and found that in addition to the $2.3 million loss on the Ethereum network, there was also a loss of $6 million on the Unichain network, bringing the total loss to $8.4 million.The attack appears to be related to a precision vulnerability in the platform's "liquidity allocation function" curve. The hacker manipulated this function through carefully designed transaction sizes, leading to errors in the rebalancing calculations, which incorrectly computed the shares each liquidity provider should hold. The hacker repeated this process to extract excess LP tokens, draining Bunni's liquidity pool.Although Bunni's codebase had been audited by well-known security firms such as Trail of Bits and Cyfrin, and there were "serious" issues reported, it remains unclear whether this attack fell within the scope of those audit reports.
app_icon
ChainCatcher Building the Web3 world with innovations.