{"id":364359,"date":"2021-11-09T08:58:48","date_gmt":"2021-11-09T05:58:48","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/synapse-bridge-prevents-8m-usd-hack\/"},"modified":"2021-11-09T08:58:48","modified_gmt":"2021-11-09T05:58:48","slug":"synapse-bridge-prevents-8m-usd-hack","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/synapse-bridge-prevents-8m-usd-hack\/","title":{"rendered":"# Synapse Bridge prevents $8M USD hack"},"content":{"rendered":"

“# Synapse Bridge prevents $8M USD hack <\/strong>”
\n<\/p>\n

Cross-chain protocols are continuing to face challenges, with Synapse Bridge narrowly averting a multi-million exploit.<\/p>\n

On Nov. 7, Synapse Bridge announced on Discord they had prevented a hacker from draining app<\/a>roximately $8 million USD from the Avalanche Neutral Dollar (nUSD) Metapool. <\/p>\n

The hacker attempted to exploit a vulnerability using the bridge to transfer assets from Polygon (MATIC) to Avalanche (AVAX). Synapse is a cross-chain bridge designed to facilitate swaps and transfers between a range of layer-one and layer-two protocols using an automated market maker (AMM).<\/p>\n

Synapse Bridge stated: \u201cOver the past 16 hours, we encountered and discovered a contract bug in the way that the AMM Metapool contracts handle virtual price calculations against the base pool’s virtual price.\u201d <\/p>\n

As soon as Synapse\u2019s validators became aware of AMM\u2019s unusual activity, the protocol paused its support for all chains and went offline. By shutting down the network, validators were able to collectively elect to reverse the transaction before it could be confirmed. In this way, the funds will ultimately not be minted to the attackers\u2019 address on the destination chain. <\/p>\n

\u201cThe validators will instead mint the nUSD back to the affected Avalanche LPs. All Avalanche nUSD LPs will be made whole, with no funds lost,\u201d stated Synapse Bridge. The funds from the rejected transaction will be used to reimburse the affected liquidity providers after the full audit of the exploit is completed.<\/p>\n

Synapse Bridge has now deployed new nUSD pools, which are a standard stableswap pool of four assets rather than a metapool. <\/p>\n

Related: <\/em><\/strong>THORChain concludes 2 security audits following summer exploits<\/em><\/strong><\/p>\n

\u201cThis is the safest route as the base stableswap contract (distinct from the Metapool contracts) has been thoroughly battle-tested by many different platforms,\u201d wrote Aurelius. <\/p>\n

Synapse Bridge says the network is now online and resuming normal activity. The user backlogs or pending transactions have also been processed. Synapse Bridge has notified Saddle, the developer of Metapool contracts. Saddle has now also paused its pool. Only those metapools from Saddle were affected by the exploit.<\/p>\n