Macauley Peterson

<div id="highlights-block_625d93ec94215" class="highlights">
        <ul>
                <li>An attacker drained 24,830 ether and 36 million BEAN tokens worth about $180 million</li>
                <li>The attacker exploited a loophole in the protocol&#8217;s governance process to push through a malicious “improvement proposal”</li>
            </ul>
    
</div>



<p>Beanstalk Farms, billed as “a decentralized credit based stablecoin protocol,” was exploited on Sunday for paper losses of about $180 million — the year’s latest DeFi hack.</p>



<p>That pegs it as the fifth-largest protocol exploit on the tracking site <a href="https://rekt.news/leaderboard/" target="_blank" rel="noreferrer noopener">Rekt Leaderboard</a> and the second largest this year after the massive <a href="https://cms.blockworks.co/axie-infinity-developers-made-some-trade-offs-that-enabled-625m-ronin-breach/" target="_blank" rel="noreferrer noopener">Ronin Bridge hack</a> in March. Security firm PeckShield <a href="https://twitter.com/peckshield/status/1515680335769456640" target="_blank" rel="noreferrer noopener">first reported</a> the news.</p>



<p>Like the Ronin exploit, most of the stolen funds consist of ether, which the attacker quickly began funneling into privacy protocol <a href="https://cms.blockworks.co/the-purpose-and-perils-of-crypto-privacy-tools/" target="_blank" rel="noreferrer noopener">Tornado Cash</a> in an effort to obscure the tokens&#8217; origin.</p>



<p>The group confirmed the exploit <a href="https://twitter.com/BeanstalkFarms/status/1515700678454390785?s=20&amp;t=6bBnLvTLeFj_ldavvVEpfw" target="_blank" rel="noreferrer noopener">on Twitter</a> Sunday and is now <a href="https://twitter.com/BeanstalkFarms/status/1515747114894065664?s=20&amp;t=6bBnLvTLeFj_ldavvVEpfw" target="_blank" rel="noreferrer noopener">considering</a> a path forward.</p>



<p>Beanstalk had recently celebrated a milestone, reaching $100 million in BEAN tokens minted. One BEAN was meant to be equal to one US dollar, but unlike stablecoins backed by fiat or crypto collateral, Beanstalk used a novel system of financial incentives to maintain its peg using credit rather than overcollateralization, according to its <a href="https://bean.money/docs/beanstalk.pdf" target="_blank" rel="noreferrer noopener">whitepaper</a>.</p>



<p>The protocol had undergone one audit from blockchain security expert Omniscia, but the firm indicated in a <a href="https://medium.com/@omniscia.io/beanstalk-farms-post-mortem-analysis-a0667ee0ca9d" target="_blank" rel="noreferrer noopener">post-mortem analysis</a> that the production code which suffered the exploit differed from what the firm had audited.</p>



<p>The developers disputed that account during a live <a href="https://anchor.fm/beanstalk-farms/episodes/Beanstalk-Exploit-Town-Hall---041722-e1hah60" target="_blank" rel="noreferrer noopener">town hall meeting</a> Sunday.</p>



<p>“We’re not in the business of pointing fingers [but] we did take a look at the report they published and didn’t feel that it was a genuine account of what occurred,” the lead developer said.</p>



<p>Omniscia pointed to a “flash-loan susceptible governance flaw” as the culprit, allowing the attacker to propose and then force through a malicious governance proposal that effectively withdrew all the protocol’s assets to the attacker’s wallet.</p>



<p>The trick was to use a massive flash-loan — borrowing vast sums that must be repaid within the same transaction — and circumvent the usual life cycle of a governance proposal. In a bit of DeFi magic using $1.04 billion in borrowed stablecoins, the attacker briefly acquired a supermajority of the protocol’s voting power, which was directed to immediately execute malicious code.</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"><p><strong>“The Beanstalk Protocol supported protocol upgrades via its Beanstalk-Improvement-Proposal (BIP) governance mechanism and as such, it was possible for an upgrade to perform arbitrary code execution thus allowing the attacker to retrieve their locked funds as part of their malicious update,” Omniscia wrote.</strong></p></blockquote>



<p>A 24-hour waiting period was in effect, but the offending BIP was disguised as a bid to donate funds to support Ukraine and passed the delay period before a supermajority vote would be effective.</p>



<p>“We thought it was very strange, but we obviously were not aware of what was going on, what attack was in progress,” the developers explained during the town hall.</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"><p><strong>“We’re going to do everything we can to find out who did this and bring them to justice.”</strong></p></blockquote>



<p>Following the exploit, the protocol‘s BEAN tokens immediately dropped in value by 90% and effectively all its other assets, including those deployed by the attacker, were liquidated, resulting in a net profit of about $75 million in ether and other tokens.</p>



<div class="wp-block-image"><figure class="aligncenter"><img decoding="async" src="https://lh3.googleusercontent.com/IC5hTLOpqEPk574b_XTJLDGu-geLQH_8TYAV4l_mGJtjX9wAYm6stnlNCvL7TZx34Qcv8BsUeODOHE4wN-Ntqy192VgWq8PgXjrFfaZcfE3X7DsjyX9n7nVVJ-ROm5Zk96epLkEY" alt=""/><figcaption>According to Beanstalk&#8217;s developers, &#8220;the existing [BEAN] should not be bought or traded as >33% of Beans are still in the exploiter&#8217;s custody. Given that the Bean token is not upgradable and has no blacklist capabilities, there is no way to remove these Beans from the exploiter&#8217;s custody. Thus, a new Bean ERC-20 token will need to be issued during a restart.&#8221;</figcaption></figure></div>



<p>According to PeckShield, the hacker sent $250,000 of USDC to an address in support of Ukraine.<br></p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">4/ The initial funds to launch the hack are withdrawn from  <a href="https://twitter.com/SynapseProtocol?ref_src=twsrc%5Etfw">@SynapseProtocol</a> and most of the result gains are deposited to <a href="https://twitter.com/TornadoCash?ref_src=twsrc%5Etfw">@TornadoCash</a>. Currently 15,154 ETH still stays in the hacker’s account. Note the hacker donates 250k USDC to Ukraine Crypto Donation. <a href="https://t.co/jBjUJ0JbGj">pic.twitter.com/jBjUJ0JbGj</a></p>&mdash; PeckShield Inc. (@peckshield) <a href="https://twitter.com/peckshield/status/1515693348815790081?ref_src=twsrc%5Etfw">April 17, 2022</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<h3 class="wp-block-heading"><strong>Seeds of hope</strong></h3>



<p>Despite the catastrophe, the protocol’s developers have pledged to continue work on the project.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">Today is a bad day, but it is not the end. We have been blown away by the show of the support from our community this am. The path forward is unclear, but the destination has never been clearer.</p>&mdash; publius (@isthispublius) <a href="https://twitter.com/isthispublius/status/1515728000247123971?ref_src=twsrc%5Etfw">April 17, 2022</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>During the town hall and on <a href="https://discord.gg/beanstalk" target="_blank" rel="noreferrer noopener">the group’s Discord</a>, the pseudonymous team took the extraordinary step of revealing their identities and explained their intention to cooperate with law enforcement in the hope of identifying the attacker and recovering funds.</p>



<div class="wp-block-image"><figure class="aligncenter"><img decoding="async" src="https://lh5.googleusercontent.com/_x64Yh0o5hCr1ejvZ4riFBU9v2HabC8-scfHnu4gxd10EbaJTil4UmKGDfLPVEb6gP3sJRx_1X5pwjPY0Xa1SmVB9YJfBgCAd9CGj5CfW4x0o4hzjyysefYLuCbtcHYUHk1rYnzu" alt=""/></figure></div>



<p>This is not the first time flash-loans have been deployed in a DeFi exploit. Last year, <a href="https://cms.blockworks.co/flash-loan-exploit-whips-cream-finance-for-130-million/" target="_blank" rel="noreferrer noopener">Cream Finance was robbed</a> of $130 million. That led its governance token CREAM to plummet by 70% — from which it has never recovered.</p>



<p>Unlike other high-value hacks, such as the <a href="https://cms.blockworks.co/wormhole-parent-commits-320m-ether-to-replace-massive-defi-hack-losses/" target="_blank" rel="noreferrer noopener">Solana Wormhole bridge exploit</a>, Beanstalk has no venture capital backing that could potentially provide a bailout to recapitalize the system.</p>



<p>The Beanstalk team did not immediately return a request for comment Monday.</p>



<p>In a follow-up <a href="https://bean.money/blog/beanstalk-governance-exploit" target="_blank" rel="noreferrer noopener">blog post</a> on Tuesday, the Beanstalk Farms team identified four &#8220;primary goals&#8221; for the project: &#8220;securing the enduring success of Beanstalk&#8217;s economic model; attracting sufficient capital to restart Beanstalk; preserving as much of each Farmers&#8217; Stalk, Seed and Pod positions as possible, and; aligning new capital with previous Stalk and Pod holders.&#8221;</p>



<p><em>This story was updated on April 19 and 5:00 am ET.</em></p>



<hr class="wp-block-separator has-alpha-channel-opacity"/>



<p><strong>Get the news in your inbox. Explore Blockworks newsletters:</strong></p>



<ul class="wp-block-list">
<li><a href="https://blockworks.co/newsletter/thebreakdown"><strong>The Breakdown</strong></a>: Decoding crypto and the markets. Daily.</li>



<li><a href="https://blockworks.co/newsletter/empire"><strong>Empire</strong></a>: Crypto news and analysis to start your day.</li>



<li><a href="https://blockworks.co/newsletter/forwardguidance"><strong>Forward Guidance</strong></a>: The intersection of crypto, macro and policy.</li>



<li><a href="https://blockworks.co/newsletter/0xresearch"><strong>0xResearch</strong></a>: Alpha directly in your inbox.</li>



<li><a href="https://blockworks.co/newsletter/lightspeed"><strong>Lightspeed</strong></a>: All things Solana.</li>



<li><a href="https://blockworks.co/newsletter/thedrop"><strong>The Drop</strong></a>: Apps, games, memes and more.</li>



<li><a href="https://blockworks.co/newsletter/supplyshock"><strong>Supply Shock</strong></a>: Bitcoin, bitcoin, bitcoin.</li>
</ul>
