{"id":563270,"date":"2023-03-14T01:37:16","date_gmt":"2023-03-13T22:37:16","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/"},"modified":"2023-03-14T01:37:16","modified_gmt":"2023-03-13T22:37:16","slug":"euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/","title":{"rendered":"# Euler attack causes locked tokens, losses in 11 DeFi protocols, including Balancer"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_84 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a2d4b0e08aa2\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a2d4b0e08aa2\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#%E2%80%9D_Euler_attack_causes_locked_tokens_losses_in_11_DeFi_protocols_including_Balancer_%E2%80%9C\" >&#8221; Euler attack causes locked tokens, losses in 11 DeFi protocols, including Balancer &#8220;<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#Balancer\" >Balancer<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#Angle_Protocol\" >Angle Protocol<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#Idle_Finance\" >Idle Finance<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#Yearn_Finance\" >Yearn Finance<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#Yield_Protocol\" >Yield Protocol<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#InverseFinance\" >InverseFinance<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#SwissBorg\" >SwissBorg<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/buradabiliyorum.com\/en\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\/#Other_affected_protocols\" >Other affected protocols<\/a><\/li><\/ul><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h1><span class=\"ez-toc-section\" id=\"%E2%80%9D_Euler_attack_causes_locked_tokens_losses_in_11_DeFi_protocols_including_Balancer_%E2%80%9C\"><\/span>&#8221; Euler attack causes locked tokens, losses in 11 DeFi protocols, including Balancer &#8220;<span class=\"ez-toc-section-end\"><\/span><\/h1>\n<p><img decoding=\"async\" src=\"https:\/\/images.cointelegraph.com\/images\/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjMtMDMvOTg2MTJlZWEtNTYzNS00NzA1LTkxN2YtZWE1NTZkMzQ2ZWI1LmpwZw==.jpg\" \/><\/p>\n<div class=\"post-content\" data-v-48054ca8>Contagion from the Dec. 12 flash loan attack against Euler has spread far and wide, resulting in frozen or lost funds for 11 different decentralized finance (DeFi) protocols, according to Dec. 13 reports from each of them on <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">Twitter<\/a>. Balancer, an Ethereum protocol with over $1 billion total value locked (TVL), is among the affected protocols.\u00a0Below is a rundown of the major exploits and what we know so far.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Balancer\"><\/span>Balancer<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Balancer reported on March 13 that the Euler Boosted USD (bb-e-USD) pool had been affected by the exploit. <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">App<\/a>roximately $11.9 million worth of tokens from this pool were sent to Euler during the exploit. The balancer emergency subDAO reacted by pausing the pool and putting it into recovery mode. However, over 65% of the pool\u2019s TVL had already been lost by the time it was paused.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">At 10:00 UTC Balancer contributors became aware of an exploit on Euler. It was determined the best course of action was to pause and put into recovery mode bbeUSD (Euler Boosted USD) and all pools containing bbeUSD. This was executed by the emergency subDAO at 11:00 UTC.<\/p>\n<p>\u2014 Balancer (@Balancer) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/Balancer\/status\/1635296203343798275?ref_src=twsrc%5Etfw\">March 13, 2023<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>As a result of a bug in the app\u2019s user interface (UI), liquidity providers cannot retrieve the remaining funds left in the pool. However, a new UI will be offered \u201cin the near future\u201d that will allow the remaining funds to be withdrawn, Balancer said. No other pools have been affected, Balancer clarified.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Angle_Protocol\"><\/span>Angle Protocol<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Angle Protocol <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/anglemoney.notion.site\/Angle-Protocol-Q-A-Regarding-Euler-Exploit-03af18cbe5e84430b3341b145554492e\">released<\/a> a preliminary report on its exposure to the attack. It may have lost over $17 million worth of USD Coin (USDC). This may have caused the agEUR stablecoin, which is pegged to the euro, to become undercollateralized. The team is still investigating and attempting to prepare a detailed balance sheet. All minting and redemption of agEUR is currently paused, but borrowers can still repay their debts to the protocol as normal, the team said.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Idle_Finance\"><\/span>Idle Finance<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Idle Finance has <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/idlefinance\/status\/1635357003978788866\">provided<\/a> a detailed list of its losses due to the Euler exploit. It seems to have lost around $5.9 million worth of tokens in total, based on March 13 Ether (ETH) and euro prices. The team has <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/idlefinance\/status\/1635250220786171906\">paused<\/a> all Best Yield vaults and Yield Tranches related to Euler to prevent further losses.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yearn_Finance\"><\/span>Yearn Finance<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yearn Finance has over $423 million in TVL, according to DeFi Llama. It reported indirect exposure to Euler, through Angle Protocol and Idle Finance. It has <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/iearnfinance\/status\/1635312188712792065\">lost<\/a> approximately $1.38 million. However, the team said that any bad debt not covered by Idle and Angle would be covered by the Yearn Treasury.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yield_Protocol\"><\/span>Yield Protocol<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yield Protocol is another protocol affected by the exploit. Its &#8220;mainnet liquidity pools are built on Euler,&#8221; according to the team&#8217;s\u00a0<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/yield\/status\/1635265757646032896\">announcement<\/a> regarding the attack. The company has disabled the mainnet app, paused borrowing, and is investigating the attack. Its mainnet liquidity pools appear to have been affected, with a possible loss of \u201cless than $1.5 million.\u201d<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">The Euler hack has affected our mainnet liquidity pools. Yield liquidity pools hold two assets: Euler eTokens and Yield fyTokens. We do not yet have accurate figures for the value of the eTokens held before the attack but believe the total value to be less than $1.5 million USD.<\/p>\n<p>\u2014 Yield Protocol (@yield) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/yield\/status\/1635339497067130881?ref_src=twsrc%5Etfw\">March 13, 2023<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h3><span class=\"ez-toc-section\" id=\"InverseFinance\"><\/span>InverseFinance<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>InverseFinance reported that it was hit as well. It&#8217;s DOLA Fed for the DOLA-bb-e-USD on Balancer <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/InverseFinance\/status\/1635280206171885572\">lost<\/a> over $860,000. The team said it is communicating with Balancer in an attempt to get these funds returned to depositors.<\/p>\n<p><em><strong>Related: <\/strong><strong>Euler Finance hacked for over $195M in a flash loan attack<\/strong><\/em><\/p>\n<h3><span class=\"ez-toc-section\" id=\"SwissBorg\"><\/span>SwissBorg<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SwissBorg <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/swissborg\/status\/1635250132370477056\">reported<\/a> that \u201ca small portion of [its] Smart Yield Program was impacted\u201d by the exploit. However, \u201cthe extent of the damage is minimal thanks to our Risk Management Procedure.\u201d The team said that it would compensate all losses from its funds, and its users \u201cwill not suffer any loss from this event.\u201d <\/p>\n<p>In a Telegram conversation with Cointelegraph, SwissBorg founder Cyrus Fazel clarified that the protocol ranks yield strategies based on risk, time, and APY. Since Euler was rated Risk 2- Adventurous, SwissBorg users \u201chad a limited amount\u201d invested in Euler. This mitigated against losses to the protocol, he explained.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Other_affected_protocols\"><\/span>Other affected protocols<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Opyn, Mean, Sense and Harvest also reported they might have been affected by the exploit, though none have provided details on how much has been lost. This brings the total number of affected protocols to 11, with $37.6 million in cumulative losses.\u00a0<\/p>\n<p>Euler Finance is a crypto borrowing and lending protocol that runs on Ethereum. It became popular thanks in part to its support for using liquid staking derivatives (LSDs) such as Coinbase Staked ETH (cbETH) or Lido Staked ETH (stETH) as collateral for loans. On March 8, Euler had over $311 million in crypto <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/defillama.com\/protocol\/euler\">locked<\/a> inside its smart contracts. Since the exploit, its TVL has fallen to $10.37 million.<\/p>\n<p><template data-name=\"subscription_form\" data-type=\"defi_newsletter\"><\/template><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong>\n<\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">News<\/a> articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/general\/\" target=\"_blank\" rel=\"noopener\">General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/cointelegraph.com\/news\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8221; Euler attack causes locked tokens, losses in 11 DeFi protocols, including Balancer &#8220; Contagion from the Dec. 12 flash loan attack against Euler has spread far and wide, resulting in frozen or lost funds for 11 different decentralized finance (DeFi) protocols, according to Dec. 13 reports from each of them on Twitter. Balancer, an&#8230;<\/p>\n","protected":false},"author":1,"featured_media":563271,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/images.cointelegraph.com\/cdn-cgi\/image\/format=auto,onerror=redirect,quality=90,width=1200\/https:\/\/s3.cointelegraph.com\/uploads\/2023-03\/98612eea-5635-4705-917f-ea556d346eb5.jpg","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[74868,74891,74882,70944],"class_list":["post-563270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-defi","tag-ethereum","tag-hacks","tag-hackers"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/563270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=563270"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/563270\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/563271"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=563270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=563270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=563270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}