The hacker managed to steal $6.2 million worth of BUSD, the Binance native USD-pegged stablecoin converted to ETH via 1inch DEX and partially withdrawn from Binance Smart Chain onto Ethereum.
- This hack was comparatively benign: only $6.2 million was stolen from Belt Finance’s massive $2.6 billion total value locked (TVL).
- The beltBUSD vault uses four strategies. A bug in the Elipsis strategy was used to leak out funds via the Venus strategy.
- The vault sends new deposits to the most undersubscribed strategy and pays out withdrawals from the most oversubscribed strategy to create balance between the four of them. The Elipsis strategy bug creates a value miscalculation if the 3EPS pool becomes unbalanced.
- Using flash loans, the hacker swapped about $200 million from BUSD to USDT, unbalancing the 3EPS pool and activating the Elipsis strategy bug. The 4Belt pool at this point would have overvalued the hacker’s shares, paying out an additional 0.5% profit after the conclusion of the flash loan. This resulted in a $1M profit from a single $200M flash loan transaction.
- The hacker repeated the transaction multiple times, netting $6.2M in profit and causing $13M in total losses, since $6M in fees were paid to the 3EPS pool.
- Along with other recent hacking indicents in the Binance Smart Chain ecosystem, this hack has led to a condemnation of ‘fork culture’ where entire codebases are replicated without thorough audits. This issue has led to several flash loan attacks over the past few weeks.
Binance Futures 50 USDT FREE Voucher: Use this link to register & get 10% off fees and 50 USDT when trading 500 USDT (limited offer).
PrimeXBT Special Offer: Use this link to register & enter POTATO50 code to get 50% free bonus on any deposit up to 1 BTC.
Source: https://cryptopotato.com/flash-loans-strike-belt-finance-exploited-for-6-2-million/
More from CryptoPotato
SEC Charges Eleven Individuals Linked to the Crypto Pyramid Scheme Forsage
Source Node: 1604200
Time Stamp: Aug 1, 2022
FTX Seeks to Claw Back $250M From SBF and Execs in New Lawsuit
Source Node: 2099137
Time Stamp: May 18, 2023
Crypto Markets Shed $130B, Bitcoin Dumps to 2-Month Low (Market Watch)
Source Node: 1287024
Time Stamp: May 1, 2022
Former Coinbase Product Manager Accused of Insider Trading
Source Node: 1587244
Time Stamp: Jul 21, 2022
Dogecoin to the Moon in Q1 2022 as DOGE-1 Set for Launch by SpaceX
Source Node: 1109672
Time Stamp: Nov 10, 2021
Lyopay launches the First All in One Crypto App with Full Services
Source Node: 1001515
Time Stamp: Jul 30, 2021
Crymbo Launches CrymboX Enable Financial Institutions to Further Liquidize Digital Assets
Source Node: 1264306
Time Stamp: Apr 15, 2022
Q3 2023 Was the Worst Quarter for NFT Sales in 3 Years: Report
Source Node: 2342908
Time Stamp: Oct 23, 2023
StakeStone Introduces a New Yield-bearing ETH: Unlocking Limitless Staking Possibilities with the LSDb Token
Source Node: 2133254
Time Stamp: Jun 14, 2023
JPMorgan’s JPM Coin Processes Over $1 Billion in Daily Transactions: Report
Source Node: 2349559
Time Stamp: Oct 26, 2023
Bitcoin Price Analysis: After 22% Weekly, Is BTC Set for Correction?
Source Node: 999328
Time Stamp: Jul 29, 2021
Grayscale Investors Urge SEC To Allow GBTC Transition To Bitcoin Spot ETF
Source Node: 1611904
Time Stamp: Feb 18, 2022