DeFi hackers ring in New Year with 3 attacks in 5 days

Budding DeFi protocols have already struggled to keep hackers at bay in 2024, with almost $100 million lost in less than a week

article-image

Pavel Ignatov/Shutterstock modified by Blockworks

share

The first week of 2024 already has DeFi users on edge after three security incidents in five days.

Over the new year, South Korean cross-chain bridging project Orbit Chain lost $80 million in assets to hackers who’d raided the protocol’s multi-signature wallet.

The team says it’s now working with domestic and international law enforcement to determine the next steps and ways to execute a viable recovery plan.

On Monday — two days after the Orbit attack — cross-chain money market Radiant Capital lost an estimated $4.5 million in a flash loan attack. 

A bad actor had manipulated the liquidity index of a freshly created native USDC market on Arbitrum to rapidly siphon crypto from the protocol, leading to pauses in lending and borrowing activities through Radiant.

Loading Tweet..

The attack left Radiant Capital with bad debt and the team says it has since taken steps to re-capitalize. The hope is that users could regain access to their deposits. 

Next up was liquidity management platform Gamma Strategies, where an estimated $3.4 million was lost on Thursday. The attacker manipulated Gamma’s accounting mechanisms to mint an excess of liquidity provider tokens, which allowed them to illegitimately withdraw more than 1,300 ETH. 

Gamma has since shut off deposits on public-facing vaults to prevent further attacks. 

Loading Tweet..

Continued exploits across DeFi have left some concerned about the future of the space. 

“DeFi really needs to wake up,” Paul Frambot, CEO of software research and development company Morpho Labs posted on X. “It has been seven years, yet every week, new large-scale hacks, incidents freezing platforms, economic attacks.”

“We are missing orders of magnitude. We need to change the current paradigm.”

This sentiment is shared by Phillip Shoemaker, executive director of Identity.com, a non-profit organization providing decentralized identity verification. 

“Security audits are critical for this industry, including for smart contracts and data storage. But I don’t think there’s nearly enough security audits happening in the digital asset space as a whole,” Shoemaker told Blockworks.

He noted that the blockchain space needs to be doing “much, much more in this regard.”

“I think these hacks and various breaches are pushing a lot of people away from engaging with the industry – people just don’t know what’s secure and what’s not. This is something that we as an industry really need to address more thoroughly,” Shoemaker said.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Research Report Templates.png

Research

ZKPs enable efficient offchain transaction processing and validation, resulting in increased throughput and reduced fees. Solana's ZK Compression leverages ZKPs to minimize onchain storage costs, while Sui's zkLogin streamlines user onboarding by replacing complex key management with familiar OAuth credentials.

article-image

The crypto asset manager lowered its planned fee from 0.25% to 0.15%, undercutting its competitors

article-image

Plus, a look at planned ETH ETF fees and how they differ from their BTC counterparts

article-image

North Korea suspected in breach of Indian exchange’s multisig wallet

article-image

Plus, Sanctum’s CLOUD token has officially launched — but not without problems

article-image

It’s not yet clear whether Donald Trump is pumping bitcoin. But an unofficial memecoin is still seeing benefit.