0VIX, a lending protocol on Polygon and Polygon zkEVM, has reportedly been exploited for at least $2 million.
The protocol enables borrowing against multiple stablecoins, derivatives of Ethereum and Polygon’s native MATIC token, as well as Aavegotchi’s staked token, vGHST. Aavegotchi is a blockchain gaming project inspired by the popular Tamagotchi game.
The exploit was carried out on the vGHST token.
Officer’s Notes, an independent security researcher, told Decypt that the attackers have already transferred $1.4 million in USDC and $600,000 in USDT via briding protocolStargate Finance as they attempt to transfer funds back to Ethereum and convert the stablecoins to ETH.
The 0VIX team responded by pausing the lending markets temporarily as they investigated the matter.
0VIX is working with its security partners to look into the current situation that seems to be related to vGHST.
As a result, POS and zkEVM markets have been paused this includes pausing oToken transfers, minting, and liquidations.
Blockchain security and data analytics firm, PeckShield, reported that the attackers took out a flash loan of $6.12 million in stablecoins to manipulate the vGSHT lending pool on 0VIX.
Blocksec, a blockchain security firm, confirmed that the hackers used the borrowed stablecoins to open vGSHT lending positions and later manipulated the protocol’s price oracle.
Aavegotchi’s native token, GHST, surged 24.7% from $1.13 to $1.41 in less than 30 minutes, according to CoinGecko.
The instant price surge of GHST turned the vGHST lending pool insolvent, and the attacker liquidated the pools, making off with the collateral from the pools.
These types of attacks are called price oracle manipulation hacks, which are common in DeFi circles.
Attackers manipulate the price oracle of a low liquid token, like GHST, inflating its price. Then, the attacker exchanges their artificially-inflated holdings for other tokens with ample liquidity and stable price.
Mango Markets on Solana and bZx exchange on Ethereum and BNB Chain were hacked using the same technique for $100 million and $55 million, respectively.
Daily Debrief Newsletter
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
Publicly traded real estate tech company DeFi Development Corporation further intensified its rapidly growing commitment to Solana with the creation of a liquid staking token alongside a collaboration with Kamino Finance, a leading DeFI protocol in Solana’s ecosystem.
The liquid staking token or LST, called dfdvSOL—which was created with LST platform Sanctum—allows users staking Solana (SOL) via the DeFi Development Corp. validator group to maintain liquidity while their native Solana tokens ar...
An investor’s $1 billion Bitcoin bet on the decentralized exchange Hyperliquid swung massively on Wednesday, with their account surviving a $32 million drawdown on paper, as the asset’s price ping-ponged on a volatile day of trading.
The user, controlling a wallet starting with “0x507,” saw their position whipsaw between a profit and a loss, hours after topping off the 40x leveraged long position, according to blockchain explorer HypurrScan. Bitcoin rose to a record $109,500 earlier in the day....
Digital assets may be firmly in the mainstream, with institutional involvement and a crypto-friendly president in the White House.
But hackers and fraudsters are having a field day so far this year.
Crypto users have lost over $1.7 billion to these groups—already 14% more than 2024’s total losses of $1.49 billion, according to blockchain security firm Immunefi.
In the same period last year, losses totaled $420 million, the firm said.
The report comes amid ongoing concerns about the vulnerabil...