Raft Finance floats user bailout plan after odd exploit

An attacker stole 1,575 ETH from Raft, then burned 1,570 of it

article-image

Profit_Image/Shutterstock modified by Blockworks

share

Raft Finance experienced a severe security breach on Friday when a hacker managed to exploit a vulnerability in the protocol, resulting in the loss of approximately $3.3 million in ether.

The protocol originated as a fork of Liquity that replaced ether with staked ether as the collateral source backing its stablecoin, R. The exploit caused R to deviate from its intended $1 peg.

That prompted the team behind Raft to confirm the vulnerability and pause further minting to prevent additional losses​​​​.

According to a post-mortem blog post published Monday, the attacker was able to mint 6.7 million R, which was then swapped for 1,575 ether (ETH) causing R to de-peg.

Read more: Liquity aims to build on safety record with V2 using staked ether

In a surprising turn of events, the attacker then sent 1,570 ETH to a burn address, effectively removing it from circulation. This action left the hacker with only 7 ETH from the stolen funds.

Prior to the attack, the hacker’s address had received 18 ETH through a crypto mixer service, suggesting a level of premeditation and planning for the attack​​​​​​.

The circumstances of this attack are unusual, in that the large majority of the stolen funds were burned, leading to speculation about the attacker’s motives. The loss may have been accidental.

Loading Tweet..
Loading Tweet..

It’s not yet clear what comes next for the protocol and its users. Developers have promised an “in-depth recovery plan this week, outlining the steps to address the situation and provide redress for affected users,” the team said in its post-mortem statement.

“The Raft community will have the opportunity to provide feedback on the proposed recovery plan before it is concluded and the recovery plan is executed,” it said.

Raft issued a governance token (RAFT) in an airdrop on Oct. 11, intended to be staked to provide holders with voting rights over the protocol. The price of RAFT has plummeted about 60% since the exploit, per Coingecko.

Total value locked (TVL) in the protocol peaked in July at $64 million, and has been on a steady decline since, according to DefiLlama — just $1.48 million remains as of today.

Meanwhile, the formerly dollar-pegged stablecoin R is volatile with very limited liquidity on a handful of decentralized exchange markets. Although the developers have suspended the creation of new R tokens, users can still repay their R-related debts to retrieve collateral that is locked in the protocol.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the Forward Guidance newsletter.

Get alpha directly in your inbox with the 0xResearch newsletter — market highlights, charts, degen trade ideas, governance updates, and more.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Permissionless is a conference for founders, application developers, and users. Come meet the next generation of people building and using crypto.

Javits Center North | 445 11th Ave

Tues - Thurs, March 18 - 20, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Monad Report Graphic.png

Research

Monad represents an ambitious attempt to address the scalability challenges faced by existing EVM chains. By leveraging innovative consensus and execution mechanisms, including pipelined consensus-execution and optimistic parallel execution, Monad aims to achieve performance metrics of 10,000 TPS and 1-second finality while maintaining full EVM compatibility. This approach positions Monad as a potential evolution of the Ethereum ecosystem, offering enhanced scalability without sacrificing the familiar developer or user experience.

article-image

Gurbir Grewal, who has been at the agency almost as long as Gensler has been chair, will depart on Oct. 11, 2024

article-image

The stablecoin’s supply has declined about 50% in the last month, from $660 million to $320 million

article-image

Plus, Sky’s soaring stablecoin and simpler bitcoin staking

article-image

Bitwise took the initial steps for an XRP ETF Wednesday

article-image

Plus, enrollment for the Donald Trump-backed crypto project is underway