Counterexploit Salvages Stolen Funds From Platypus Hacker

After the initial hack, Platypus updated its pool contract to counterexploit $2.4 million in USDC from the hacker


DALL-E modified by Blockworks


Platypus, a DeFi stablecoin swapping protocol on Avalanche, was exploited for $8.5 million on Thursday evening.

The exploit occurred via a flashloan attack that took advantage of a flaw in its USP solvency check mechanism — which tricked Platypus’s smart contracts into thinking that USP was fully backed. USP is Platypus’ native stabletoken. 

Soon after the exploit, crypto community members came together to recover the funds. 

ZachXBT — a crypto scam researcher — said on Twitter that he tracked down the attacker’s wallet address after reviewing their own chain history across multiple chains.

“Your OpenSea account links directly to your Twitter and you liked a Tweet about the Platypus exploit,” ZachXBT tweeted.

Loading Tweet..

“We’d like to negotiate returning of the funds before we engage with law enforcement,” he wrote.

Platypus — meanwhile and with the help of BlockSec — updated its pool contract to counterexploit $2.4 million in USDC from the hacker.

“They updated it such that when the exploit contract deposited the USDC (which it is tricked to believe is a flash loan) as collateral for the minting of USP, they could trick the code that it owed 0 USDC back,” Twitter user nervoir said.

The USDC from the fake pool was sent to hardcoded addresses to avoid generalized front runners, nervoir tweeted. 

“The other assets will probably be harder to recover but given that they control the pool code they have significant control,” they said.

Loading Tweet..

Platypus’s stablecoin, USP, lost its peg to the dollar, dropping to $0.48. It then briefly recovered to $0.97, but has since dipped back down to $0.48, data from CoinGecko shows.


Upcoming Events

Hilton Metropole | 225 Edgware Rd, London

MON - WED, MARCH 18 - 20, 2024

Crypto’s premier institutional conference returns to London in March 2024. The DAS: London Experience:  Attend expert-led panel discussions and fireside chats  Hear the latest developments regarding the crypto and digital asset regulatory environment directly from policymakers and experts   Grow your network […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Frax report cover.jpg


Frax saw continued development in its frxETH liquid staking derivative and Fraxlend money market throughout 2023. Frax V3 introduces an RWA strategy to drive utility to the protocol's cornerstone product, the FRAX stablecoin.


Bitcoin has rebounded 130% so far this year


Following layoffs at BAYC parent Yuga Labs and OpenSea, Tiger Global marked down its stakes


Recent SEC filings suggest the regulator could be lining up the approval of multiple proposals in early January, segment observers argue


A dinner back in September gave big traders a heads up about the DOJ settlement, Bloomberg reported


On-chain debt capital markets platform deploys on Coinbase-incubated layer-2 after structured investment products push


Past performance is not indicative of future results, sure, but no need to rain on the bitcoin price parade just yet