DeFi Protocol Qubit Finance Loses $80M in Hack

Hackers stole 206,809 Binance Coin, roughly $80 million, from Qubit’s QBridge protocol, making it the seventh largest DeFi hack ever

article-image

Source: Shutterstock

share

key takeaways

  • “The exploit and loss of funds have a profound effect on thousands of real people,” the company said
  • Qubit is continuing to track the exploiter and monitor affected assets and has disabled a number of account management features until further notice

Hackers have stolen $80 million from DeFi protocol Qubit Finance, the firm confirmed on Friday. 

The attackers exploited the protocol to take 206,809 Binance coins through Qubit’s QBridge deposit function, making it the seventh largest DeFi hack ever, DeFiYield Rekt data shows. 

The QBridge protocol is an Ethereum-BSC (Binance Smart Chain) bridge that allows users to swap ERC-20 and BEP-20 tokens between the two blockchains. The protocol is implemented as a set of smart contracts built on top of the BSC.

The attacker essentially took advantage of a logical error in Qubit Finance’s code that allowed them to input malicious data and withdraw tokens on BSC when none were deposited on Ethereum, blockchain security firm CertiK explained

The decentralized money market platform tweeted a statement to notify the exploiter that they were aware of what was happening and proposed a direct negotiation before taking further action. 

Loading Tweet..

“The exploit and loss of funds have a profound effect on thousands of real people,” the company said. 

The team also contacted the exploiter to offer the maximum bounty as set by its program, it said in a post. It didn’t disclose how much the bounty would be, or if the hacker was receptive.  

Qubit is continuing to track the exploiter and monitor affected assets and has disabled a number of account management features until further notice. However, its claiming feature is still available, it said. 

“We are continuing to investigate and are in communications with Binance,” Qubit wrote. “Further updates and a full report will be shared as they become available.”

The company was not available for additional comment when requested by Blockworks. 


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Screenshot 2024-05-23 091855.png

Research

Bitcoin L2s aim to boost scalability while preserving decentralization and security, unlocking a better user experience, and new avenues for Bitcoin-powered innovations. However, no existing Bitcoin L2 leverages the full security of Bitcoin.

article-image

Three Democrats joined Republicans Thursday in supporting a bill that would block the Federal Reserve from issuing a retail CBDC

article-image

Plus, Zeta Markets has released a litepaper for the “Zeta X” layer-2 it’s hoping to send to mainnet in early 2025

article-image

From CME Group’s launch of ether futures to congressmen urging the SEC to approve spot funds, a lot has led up the agency’s decision

article-image

Sponsored

As part of the #Breakout2024 plans, Radix has introduced Token Trek

article-image

House members ask Gensler to keep a “consistent and equitable approach” with ether ETF proposals after the agency approved spot bitcoin ETFs in January

article-image

Using old-world instruments to address crypto user experience challenges goes against what this industry set out to do