Euler Suffers $200M Exploit in Flash Loan Attack

Euler’s team is working with security and law enforcement to resolve issues at hand

article-image

Sashkin/Shutterstock.com modified by Blockworks

share

Euler Finance, a DeFi lending and borrowing protocol has been exploited by almost $200 million in a flash loan attack.

Contents lost in the attack include $8.7 million in DAI, $18.5 million in WBTC, $135.8 million in stETH, and $33.8 million in USDC, information compiled by BlockSec shows. 

“We are aware and our team is currently working with security professionals and law enforcement. We will release further information as soon as we have it,” Euler Labs tweeted

Flash loan attacks have been common in DeFi — including some similarly large exploits such as Beanstalk’s loss of $182 million in April 2022.

In a traditional flash loan, traders are able to borrow cryptocurrencies without any collateral, but these assets must be returned within the same transaction.

Euler’s exploiter used a series of six different flash loans in the attack by tricking its smart contract into believing there were fewer collateral tokens than debt tokens.

According to blockchain security and data analytics company PeckShield, “The hack is made possible due to the flawed logic [in] its donation and liquidation.”

“Specifically, the donateToReserves needs to ensure the donator is still over-collateralized,” the company tweeted. “And liquidation needs to ensure the *correct* conversion rate from borrow to collateral asset.”

Following the exploit, the price of Euler’s native token (EUL) has dipped by over 55%. At the time of writing, it is currency trading at $2.75, according to CoinGecko.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

AERODROME TEMPLATE.png

Research

Aerodrome is a "MetaDEX" that combines elements of various DEX primitives such as Uniswap V2 and V3, Curve, Convex, and Votium. Since its launch on Base, it has become the largest protocol by TVL with more than $495M in value locked, doubling Uniswap's Base deployment.

article-image

The SEC has signaled a timeline to issuers that could lead to a July 23 launch for the ETH funds, people close to the process told Blockworks

article-image

PayPal has unequivocally made a name for itself as a crypto adopter among fintech giants

article-image

Also, a look into how the highly-debated SAB 121 could end up shaking out for crypto custodians

article-image

Vance, an Ohio Republican, is largely seen as crypto-friendly

article-image

Plus, all the world is green as prices across the crypto space rally, with solana reaching a nearly two-week high

article-image

Investors add to crypto positions after “turnaround in sentiment due to lower-than-expected CPI,” CoinShares research head says