{"id":416393,"date":"2022-03-15T14:48:24","date_gmt":"2022-03-15T11:48:24","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/deus-finance-exploit-hackers-get-away-with-3m-worth-of-dai-and-ether\/"},"modified":"2022-03-15T14:48:24","modified_gmt":"2022-03-15T11:48:24","slug":"deus-finance-exploit-hackers-get-away-with-3m-worth-of-dai-and-ether","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/deus-finance-exploit-hackers-get-away-with-3m-worth-of-dai-and-ether\/","title":{"rendered":"# Deus Finance exploit: Hackers get away with $3M worth of DAI and Ether"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6af7de96a368e\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6af7de96a368e\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/deus-finance-exploit-hackers-get-away-with-3m-worth-of-dai-and-ether\/#%E2%80%9D_Deus_Finance_exploit_Hackers_get_away_with_3M_worth_of_DAI_and_Ether_%E2%80%9C\" >&#8221; Deus Finance exploit: Hackers get away with $3M worth of DAI and Ether  &#8220;<\/a><\/li><\/ul><\/nav><\/div>\n<h1><span class=\"ez-toc-section\" id=\"%E2%80%9D_Deus_Finance_exploit_Hackers_get_away_with_3M_worth_of_DAI_and_Ether_%E2%80%9C\"><\/span>&#8221; Deus Finance exploit: Hackers get away with $3M worth of DAI and Ether  &#8220;<span class=\"ez-toc-section-end\"><\/span><\/h1>\n<div class=\"post-content\" data-v-128018ef>Multi-token decentralized finance (DeFi) marketplace\u00a0Deus Finance has become the latest victim of an exploit resulting in over $3 million losses in DAI and Ether (ETH).<\/p>\n<p>DeFi analytic firm PeckShield took to <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">Twitter<\/a> to explain the cause and manner in which the funds were exploited. The hackers behind the attack managed to exploit and manipulate price oracle for flash loans, resulting in the insolvency of users\u2019 funds. <\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">1\/ <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/DeusDao?ref_src=twsrc%5Etfw\">@deusdao<\/a> Deus Finance was exploited in <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/bfYCQcz5rZ\">https:\/\/t.co\/bfYCQcz5rZ<\/a>, leading to the gain of ~$3M for the hacker (The protocol loss may be larger), including 200,000 DAI and 1101.8 ETH<\/p>\n<p>\u2014 PeckShield Inc. (@peckshield) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/peckshield\/status\/1503632734299701250?ref_src=twsrc%5Etfw\">March 15, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\nThe hackers manipulated the price from the pair of StableV1 AMM &#8211; USDC\/DEI, using which the protocol used to set price oracle for its flash loans.<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2022-03\/70dad95d-a051-4f90-92ef-2bf15902c6a8.jpg\"><figcaption style=\"text-align: center;\"><em>Example of Price Manipulation Source: PeckShield<\/em><\/figcaption><\/figure>\n<p>PeckShield revealed that hackers managed to steal 200,000 DAI and 1101.8 ETH, and the total amount of stolen funds could be larger than the early estimates of $3 million. <\/p>\n<p>The hacker behind the attack then funneled the stolen funds using the coin mixer tool Tornado cash via Multichain protocol (previously known as AnySwap).<\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2022-03\/52c7dd5a-202d-4d1c-96aa-59907efd0270.jpg\"><figcaption style=\"text-align: center;\">Stolen Funds Washed through TornadoCash Source: EtherScan<\/figcaption><\/figure>\n<p><strong><em>Related:\u00a0Altcoin Roundup: DeFi token prices are down, but utility is on the rise<\/em><\/strong><\/p>\n<p>Deus Finance acknowledged the exploit on its lending protocol and claimed it has closed its $DEI lending contract. The DeFi protocol also claimed that both $DEUS and $DEI are unaffected by the exploit.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">We are aware of the recent exploit reports regarding the <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/search?q=%24DEI&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$DEI<\/a> lending contract.<\/p>\n<p>Contract has been closed, both <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/search?q=%24DEUS&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$DEUS<\/a> &amp; <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/search?q=%24DEI&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$DEI<\/a> are unaffected. Devs are working on a summary of the events, all information will be communicated once we have assessed the full situation.<\/p>\n<p>\u2014 DEUS Finance DAO (@DeusDao) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/DeusDao\/status\/1503652836978143242?ref_src=twsrc%5Etfw\">March 15, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Deus Finance provides DeFi infrastructure to help others create financial instruments including synthetic stock trading platforms, options and futures trading.<\/p>\n<p>Lafayette Tabor, the CEO of Deus Protocol took to Twitter to inform the community about the reimbursement plans. He said that the developers would create a new contract where affected users would be able to repay their loans. He <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/lafachief\/status\/1503678891386359808?s=20&amp;t=7LdfHrWJhnxusfsmBQpa4w\">explained<\/a>:<\/p>\n<blockquote><p>\u201cWe will create a contract you will be able to repay your DEBT on it and get your sAMM that were liquidated, we will also implement a feature that lets you swap DEI against a small MUON allocation. (paying from my team allocation).\u201d<\/p><\/blockquote>\n<p><template data-name=\"subscription_form\" data-type=\"defi_newsletter\"><\/template><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong>\n<\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">News<\/a> articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/general\/\" target=\"_blank\" rel=\"noopener\">General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/cointelegraph.com\/news\/deus-finance-exploit-hackers-get-away-with-3m-worth-of-dai-and-ether\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8221; Deus Finance exploit: Hackers get away with $3M worth of DAI and Ether &#8220; Multi-token decentralized finance (DeFi) marketplace\u00a0Deus Finance has become the latest victim of an exploit resulting in over $3 million losses in DAI and Ether (ETH). DeFi analytic firm PeckShield took to Twitter to explain the cause and manner in which&#8230;<\/p>\n","protected":false},"author":1,"featured_media":416394,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/images.cointelegraph.com\/images\/1200_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjItMDMvNmU0ZDQ0N2EtYmJmOS00YzIxLWE4ODMtYWZhZTEzN2Y3ZTUzLmpwZw==.jpg","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[74877,74868,74882],"class_list":["post-416393","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-decentralized-exchange","tag-defi","tag-hacks"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/416393","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=416393"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/416393\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/416394"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=416393"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=416393"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=416393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}