Cryptocurrency traders are continuing to face fallout from the Terra blockchain crash.
Now that Terra 2.0 has launched—with the old LUNA cryptocurrency renamed to Luna Classic, or LUNC—the new LUNA token on the Terra blockchain was trading at $8.51 as of this writing, while LUNC was trading at $0.0001.
This substantial price discrepancy enabled an exploit yesterday in which an attacker reportedly drained more than $2 million from Mirror Protocol.
Mirror Protocol is a Terra DeFi project with an Ethereum token MIR, which is down more than 9% over the last 24 hours. On Mirror, users can trade synthetic versions of real equities, like shares of Amazon or Apple.
But an issue with Terra Classic validators caused a mixup in the oracle’s price reporting of LUNC, listing LUNC’s price as LUNA’s.
.@mirror_protocol has just been exploited again due to Terra Classic validators reporting the price of the new Terra 2.0 $LUNA coin (~$9.80) instead of the original Terra Classic $LUNC coin (~$0.0001)
The error reportedly occurred because many Terra Classic validators weren’t running an updated version of the price oracle.
This is because a majority of the #TerraClassic#LUNC validators are running an outdated version of the price oracle! You can see who is publishing bad prices here https://t.co/cKM9V1VbPh if they have a low missed-oracle vote count they need to update ASAP!!! https://t.co/h5GBrg3UGe
In short, that stark price difference enabled the attacker to use the inflated crypto to mint synthetic assets and then sell them for UST and USDC. As one user explained on Discord, the exploit caused some of Mirror’s assets to plummet.
Following the reported attack, Mirror is now seeing dramatic differences between the Pool Price and Oracle Price of mBTC, mDOT, mETH, and mGLXY. Image: mirrorprotocol.app
Early Tuesday morning, FatManTerra reported that Mirror had disabled the use of mBTC, mETH, mGLXY, and mDOT as collateral to prevent further liquidity from being drained.
As Mirror struggles to restabilize, an ambassador for Chainlink argued that the exploit could have been avoided, writing on Twitter: “This issue was 100% preventable as soon as the decision was made to rebrand $LUNA to $LUNC though proper coordination and management of the oracles.”
The Mirror Protocol team did not immediately respond to requests for comment from Decrypt.
Daily Debrief Newsletter
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
Digital assets may be firmly in the mainstream, with institutional involvement and a crypto-friendly president in the White House.
But hackers and fraudsters are having a field day so far this year.
Crypto users have lost over $1.7 billion to these groups—already 14% more than 2024’s total losses of $1.49 billion, according to blockchain security firm Immunefi.
In the same period last year, losses totaled $420 million, the firm said.
The report comes amid ongoing concerns about the vulnerabil...
Libre, a regulated real-world asset platform, and the TON Foundation have launched a $500 million tokenized fund on The Open Network, aiming to bring Telegram’s $2.4 billion in corporate debt onto the blockchain for the first time.
Dubbed the Telegram Bond Fund, the product allows institutional and accredited investors to gain exposure to Telegram’s outstanding bonds directly through the TON blockchain, according to a statement shared with Decrypt.
The fund will also participate in future Telegr...
Solana decentralized exchange Raydium has deployed its native token launchpad, which is designed to rival the popular Pump.fun. This comes almost a month after Pump.fun deployed its own decentralized exchange, cutting ties with Raydium in the process.
LaunchLab by Raydium offers a more sophisticated token creation process, compared to Pump.fun’s simplistic approach. The new launchpad allows for deployers to toy with the token supply, how many tokens will be sold on the bonding curve, and how muc...
