{"id":276700,"date":"2021-06-17T02:58:32","date_gmt":"2021-06-16T23:58:32","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/alchemix-patches-reverse-rug-exploit-address-6-5-million-shortfall\/"},"modified":"2021-06-17T02:58:32","modified_gmt":"2021-06-16T23:58:32","slug":"alchemix-patches-reverse-rug-exploit-address-6-5-million-shortfall","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/alchemix-patches-reverse-rug-exploit-address-6-5-million-shortfall\/","title":{"rendered":"# Alchemix patches \u2018Reverse Rug\u2019 exploit, address $6.5 million shortfall"},"content":{"rendered":"<p>&#8220;<strong># Alchemix patches \u2018Reverse Rug\u2019 exploit, address $6.5 million shortfall  <\/strong>&#8221;<br \/>\n<img decoding=\"async\" src=\"https:\/\/images.cointelegraph.com\/images\/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjEtMDYvYjU0NTcwMzgtMDc5MC00MDM3LTlmM2YtYzY1ZmQwOWRlNGNjLmpwZw==.jpg\" \/><\/p>\n<div class=\"post-content\" data-v-128018ef>It\u2019s as miraculous as Aladdin taking off on a magic carpet: in a possible first, some of the users of a decentralized finance protocol were the ones to benefit today from an exploit, turning the concept of a \u2018rugpull\u2019 on its head.\u00a0<\/p>\n<p>A colloquialism for when liquidity is drained from a project (often an unscrupulous founder or developer draining the funds themselves), depositors and DeFi users are most often the ones holding bad debt and\/or worthless tokens \u2014 left to hope for compensation plans that can take months or even years to fully vest. <\/p>\n<p>In an exploit today, however, the users are the ones who got to pull at the seams for a change. <\/p>\n<p>This morning, Alchemix announced that the contracts for one of their synthetic assets, alETH, had experienced an \u201cincident.\u201d <\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">There has been an incident with the Alchemix alETH contracts. Together with the fantastic team at <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/iearnfinance?ref_src=twsrc%5Etfw\">@iearnfinance<\/a>, we have identified the error and are both working on a post-mortem and a solution to the problem.<\/p>\n<p>Funds are safe.<\/p>\n<p>\u2014 Alchemix (@AlchemixFi) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/AlchemixFi\/status\/1405187348678148101?ref_src=twsrc%5Etfw\">June 16, 2021<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>In a incident report published later in the day, Alchemix developer \u201cn4n0\u201d said that \u201can issue with the deployment <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">script<\/a> of the alETH vault accidentally created additional vaults,\u201d some of which the protocol used to incorrectly calculate outstanding debts, which in turn meant protocol funds were used to \u201cpay off user debts.\u201d<\/p>\n<p>As a result, for a short window of time users were able to withdraw their ETH collateral with their alETH loans still outstanding \u2014 a rugpull by the community to the tune of $6.5 million. <\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Alchemix innovating again&#8230; this time with the reverse rugpull.. a &#8216;rugput&#8217;<\/p>\n<p>Joking aside there was a little incident with the new alETH vault in which nobody lost any funds but some users actually gained<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/n4n084191635?ref_src=twsrc%5Etfw\">@n4n084191635<\/a> with a great incident report here<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/Vo3cWRnZPx\">https:\/\/t.co\/Vo3cWRnZPx<\/a> <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/68G3y1s3x0\">pic.twitter.com\/68G3y1s3x0<\/a><\/p>\n<p>\u2014 \u27e0 toast.eth  (@intocryptoast) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/intocryptoast\/status\/1405252688791498753?ref_src=twsrc%5Etfw\">June 16, 2021<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Per the incident report, the team paused the mint contract for alETH two and a half hours after the exploit was discovered. The report notes that no users lost funds as a result of the exploit, and that Yearn.Finance \u2014 whose yield vaults automatically repay Alchemix\u2019s synthetic loans \u2014 suffered no loss as well. Additionally, a \u201cconservative\u201d initial debt ceiling prevented the protocol loss from being more extreme.\u00a0<\/p>\n<p>The team, including incident report author n4n0 appear to be taking the loss in stride: <\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Damn this alETH incident is producing the dankest memes ngl. Credit to <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/alibyte?ref_src=twsrc%5Etfw\">@alibyte<\/a> <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/brk5gUfpST\">pic.twitter.com\/brk5gUfpST<\/a><\/p>\n<p>\u2014 n4n0 (@n4n084191635) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/n4n084191635\/status\/1405173748425240586?ref_src=twsrc%5Etfw\">June 16, 2021<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>A trio of solutions is being deployed to cover the shortfall, including a temporary increase in protocol fees, a injection of ETH liquidity from Alchemix\u2019s treasury, and a sale of DAI from the treasury for additional ETH. The team says they will be deploying an entirely new vault to address the flaws of the original.\u00a0<\/p>\n<p>Further changes may be on the horizon for the alETH asset as well. Alchemix currently has a alETH\/ETH pool live on Saddle, a VC-backed fork of Curve Finance, following Curve reportedly turning down creating a pool for the synthetic Ether. However, in the past 48 hours the Curve <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">social media<\/a> account has been making <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/CurveFinance\/status\/1404835687522766848\">overtures<\/a> in an effort to bring Alchemix\u2019s latest synthetic asset back. <\/p>\n<p><template data-name=\"subscription_form\" data-type=\"defi_newsletter\"><\/template><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong>\n<\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">News<\/a> articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/general\/\" target=\"_blank\" rel=\"noopener\">General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/cointelegraph.com\/news\/alchemix-patches-reverse-rug-exploit-address-6-5-million-shortfall\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;# Alchemix patches \u2018Reverse Rug\u2019 exploit, address $6.5 million shortfall &#8221; It\u2019s as miraculous as Aladdin taking off on a magic carpet: in a possible first, some of the users of a decentralized finance protocol were the ones to benefit today from an exploit, turning the concept of a \u2018rugpull\u2019 on its head.\u00a0 A colloquialism&#8230;<\/p>\n","protected":false},"author":1,"featured_media":276701,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/images.cointelegraph.com\/images\/1200_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjEtMDYvYjU0NTcwMzgtMDc5MC00MDM3LTlmM2YtYzY1ZmQwOWRlNGNjLmpwZw==.jpg","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[75186,74868,74891,74882],"class_list":["post-276700","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-dao","tag-defi","tag-ethereum","tag-hacks"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/276700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=276700"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/276700\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/276701"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=276700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=276700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=276700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}