Hackers attacked decentralized exchange (DEX) QuickSwap today, making away with $220,000 in a flash loan exploit.
The DEX said Monday that it had closed QuickSwap Lend, its lending protocol, following the exploit. It added that the only platform hit by an exploit was its Market XYZ lending market.
Users also didn’t lose any funds, according to the DEX. Flash loans, popular in the world of DeFiDeFi (decentralized finance), allow crypto users to take out instant loans without collateral.
⚠️QuickSwap Lend is closing⚠️
🔗$220k was exploited in a flash loans attack due to a vulnerability with the Curve Oracle, which @marketxyz was using
☣ Only the Market XYZ lending market was compromised. QuickSwap's contracts are unaffected
But they are prone to exploits—like QuickSwap’s today. Flash loan exploits—which happen a lot in DeFi—are when a highly capitalized bad actor manipulates the price of an asset by taking out lots of loans, and then quickly sells back the borrowed capital to earn a profit.
Blockchain security firm PeckShield posted details of the exploit. A few hours later, the hackers were using sanctioned coin mixer Tornado Cash to hide the origin of the funds, according to Etherscan data.
People use QuickSwap to swap tokens. As a DEX, it requires no sign-up (unlike a centralized exchange like Coinbase) and has no middle-man—so anyone can use it.
QuickSwap is a fork of the Uniswap DEX, one of the biggest DeFi apps in the crypto space. But unlike Uniswap, it doesn’t run on Ethereum but Polygon, the blockchain which hosts the 12th biggest cryptocurrency, MATIC.
Even if you’re relatively new to crypto, you may have bought or traded Bitcoin, Ethereum and other assets on a cryptocurrency exchange. Exchanges like Binance and Coinbase are some of the most successful businesses in the crypto space; Coinbase, one of the leading exchanges, went public in a direct listing earlier this year. Binance, Coinbase, Gemini, Kraken, and others are called "centralized exchanges," since one company operates them and reaps profit from operating them.
The Ultimate Beginner...
DEXs are vulnerable to flash loans and other hacks, though, and as users are completely in control of their funds, there is no insurance—as there would be on a centralized exchange.
Daily Debrief Newsletter
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
An investor’s $1 billion Bitcoin bet on the decentralized exchange Hyperliquid swung massively on Wednesday, with their account surviving a $32 million drawdown on paper, as the asset’s price ping-ponged on a volatile day of trading.
The user, controlling a wallet starting with “0x507,” saw their position whipsaw between a profit and a loss, hours after topping off the 40x leveraged long position, according to blockchain explorer HypurrScan. Bitcoin rose to a record $109,500 earlier in the day....
Digital assets may be firmly in the mainstream, with institutional involvement and a crypto-friendly president in the White House.
But hackers and fraudsters are having a field day so far this year.
Crypto users have lost over $1.7 billion to these groups—already 14% more than 2024’s total losses of $1.49 billion, according to blockchain security firm Immunefi.
In the same period last year, losses totaled $420 million, the firm said.
The report comes amid ongoing concerns about the vulnerabil...
Libre, a regulated real-world asset platform, and the TON Foundation have launched a $500 million tokenized fund on The Open Network, aiming to bring Telegram’s $2.4 billion in corporate debt onto the blockchain for the first time.
Dubbed the Telegram Bond Fund, the product allows institutional and accredited investors to gain exposure to Telegram’s outstanding bonds directly through the TON blockchain, according to a statement shared with Decrypt.
The fund will also participate in future Telegr...