Arbitrum Stablecoin Exploiter Snagged $300K From 9.7B Token Boost

The “puzzling” attack showed no transfer logs of minting or transferring the infinite number of tokens, a blockchain sleuth said

article-image

Brian A Jackson/Shutterstock.com modified by Blockworks

share

SperaxUSD, a yield automator on Ethereum layer-2 rollup Arbitrum, announced a user was able to explode the balance of their stablecoin tokens over the weekend. 

In a Twitter thread, the team said an exploiter somehow obtained 9.7 billion USDS tokens for barely any collateral and managed to liquidate around $300,000 worth before being blocked by the Sperax and Arbitrum teams.

The Sperax team has identified the account and is in the process of taking action in coordination with centralized exchanges. The liquidated amount will be recapitalized before the protocol’s relaunch, it said. The exploit did not impact the DeFi protocol’s governance token SPA.

Loading Tweet..

SperaxUSD didn’t return Blockworks’ request for comment on further details, but a detailed report was set to be published Monday.

“We have reached out to the exploiter to discuss options and we are hopeful for a peaceful resolution. The issue has been figured out and will be resolved with a smart contract upgrade. Recapitalization will be implemented early next week, then transactions will restart,” the team said.

Code bug?

A blockchain analyst who goes by the name “Spreek” on Twitter provided the likely attacker’s address in a tweet, singling out its Ethereum Name Service as “kochironnosaif.eth.”

The attack was “puzzling” as there were no transfer logs of minting or transferring the infinite number of tokens, nor was there any malicious upgrade to the contract, the sleuth said.

“Therefore I would guess [the] likely cause is [a] bug in rebasing code,” they said.

Blockchain security firm PeckShield said the root cause of the hack was due to an “internal balance accounting discrepancy caused when migrating an account from non-rebasing to rebasing-based accounting.”

Loading Tweet..

SperaxUSD is a “hybrid” stablecoin whose design includes both collateral-backing and an algorithmic stabilization mechanism, according to its white paper.


Don’t miss the next big story – join our free daily newsletter.

Tags

Upcoming Events

Hilton Metropole | 225 Edgware Rd, London

Mon - Wed, March 18 - 20, 2024

Crypto’s premier institutional conference returns to London in March 2024. The DAS: London Experience: Attend expert-led panel discussions and fireside chats Hear the latest developments regarding the crypto and digital asset regulatory environment directly from policymakers and experts.

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Top Icon.png

Research

Osmosis thrived in H2 2023 on the back of increased DeFi activity deriving from recently launched Cosmos-related projects and better market conditions. With new value accrual mechanisms for the native token, Osmosis is well-positioned to continue its strong performance in 2024.

/

article-image

Though the opposing flow trend is likely to slow over time, industry watchers note, bitcoin fund assets could one day eclipse the $90 billion gold ETF space

article-image

Celestia had the first mover advantage. EigenDA has staked ether. What sets Avail apart?

article-image

Bitcoin moved 1% higher Monday morning in New York, Matrixport analysts say $62,000 could happen next month

article-image

It’s hard to believe right now that crypto — even with all of its flexibility and massive capabilities — could ever be like cash on the internet

article-image

Michael Saylor announced Monday morning that MicroStrategy bought 3k more bitcoin after the X account was compromised over the weekend

article-image

Plus, Pudgy Penguins grows its brand and a group of Autoglyphs sell for $14.5 million