$96,225.00
1.44%$1,847.64
2.86%$2.24
0.79%$603.35
0.36%$151.57
3.41%$1.00
0.02%$0.179136
3.01%$0.706395
1.71%$0.248859
1.40%$1,846.79
3.15%$96,146.00
1.51%$3.70
6.00%$14.95
3.24%$21.45
0.11%$0.278582
1.07%$8.93
-1.09%$0.00001365
2.02%$0.188861
2.61%$3.18
-1.46%$2,220.65
2.91%$0.99987
0.00%$371.81
1.34%$20.16
7.93%$87.09
3.07%$4.17
1.32%$1,847.36
3.05%$1.00
-0.14%$4.38
-0.06%$270.73
-0.09%$1.00
0.08%$0.612589
6.08%$29.25
0.71%$1,969.19
3.11%$96,256.00
1.63%$0.00000902
0.21%$5.54
3.19%$372.56
3.88%$5.35
0.81%$51.98
1.17%$2.57
2.99%$1.05
0.03%$0.928537
0.91%$1.00
0.00%$22.00
0.85%$13.21
1.82%$173.22
6.34%$4.90
0.13%$16.91
1.34%$31.72
2.10%$0.744016
1.25%$0.095043
7.61%$0.090009
0.98%$4.60
4.21%$0.02721267
1.74%$1.00
-0.13%$1.17
0.05%$0.241739
0.57%$0.767448
7.28%$4.40
0.68%$95,847.00
2.39%$0.226627
0.55%$2.81
1.78%$0.334193
5.73%$4.27
-0.45%$0.549558
7.92%$2.75
0.77%$0.339658
2.98%$4.16
1.94%$0.00001951
0.32%$0.999528
0.32%$96,166.00
1.51%$1.086
2.64%$10.79
0.64%$0.470935
3.68%$0.84905
5.60%$1,529.43
2.35%$1.25
10.72%$158.76
3.08%$1.24
2.47%$0.734312
-2.19%$0.077396
-2.34%$0.225859
7.39%$0.01803328
-1.21%$1.73
34.80%$77.25
2.91%$1,845.91
2.91%$4.01
-1.74%$1,927.68
2.45%$1.001
0.11%$0.571977
-0.97%$0.682213
-0.07%$10.54
10.13%$0.743749
11.45%$0.099572
2.90%$0.999962
-0.09%$0.999777
0.03%$603.35
0.33%$2,095.32
3.07%$0.00008916
-2.08%$2.85
1.33%$0.01694388
0.50%$1.00
-0.01%$3,230.55
-2.00%$0.211457
2.49%$0.788654
0.46%$0.85755
3.91%$3,229.00
-2.05%$167.35
3.66%$38.50
2.71%$96,236.00
1.59%$0.763684
1.86%$13.31
2.43%$0.608099
8.78%$0.01712852
1.67%$96,445.00
2.54%$195.11
3.59%$0.303795
3.13%$95,830.00
1.88%$4.01
1.60%$0.01144918
8.48%$0.00000071
0.24%$1,964.92
3.22%$0.117345
2.67%$2.11
2.60%$0.067761
10.39%$0.997829
0.01%$0.410576
2.64%$0.639207
7.14%$3.02
-3.54%$18.91
5.05%$0.998534
0.05%$0.249786
1.14%$0.0182125
0.66%$1.86
2.71%$0.319704
2.08%$1,930.80
2.73%$1.10
-0.26%$0.56343
1.18%$0.720486
18.54%$3.53
3.68%$35.60
-0.45%$0.154092
0.92%$0.579107
4.71%$0.00932114
4.50%$0.00570347
8.73%$0.441698
7.28%$0.659755
2.65%$0.20275
7.16%$17.89
4.31%$0.070018
-2.60%$0.998858
0.09%$1,935.13
3.30%$96,058.00
1.26%$1.004
0.37%$1.39
2.07%$95,658.00
0.00%$0.444809
1.82%$0.999994
0.01%$0.0089529
22.60%$0.483835
-1.18%$0.148116
1.37%$93,622.00
3.60%$0.178863
3.11%$6.95
3.84%$96,080.00
1.54%$0.00002233
0.55%$6.18
0.50%$1.57
0.15%$0.539597
0.32%$1,848.08
3.07%$1.72
16.70%$110.88
0.01%$3.53
-1.74%$0.241488
0.30%$0.00000042
0.61%$0.080257
0.65%$0.090262
3.49%$2.55
1.14%$1.005
0.57%$1.085
0.00%$0.04225371
2.29%$1,845.77
2.99%$1,964.52
3.03%$0.19268
1.90%$0.392439
6.48%$0.03824672
2.82%$1,846.84
3.01%$0.391412
0.41%$40.93
-1.21%$1.37
13.40%$1.001
0.09%$1,848.37
3.33%$0.562461
1.87%$21.57
0.36%$0.00418045
0.27%$0.133072
0.64%$31.65
0.27%$0.01784193
1.44%$0.748859
8.92%$1,886.77
3.57%$0.806169
0.81%$0.00006127
0.66%$0.301852
11.26%$1.00
0.01%$0.999419
-0.17%$0.716695
2.17%$1.00
0.02%$0.00459872
1.13%$0.998844
-0.10%$2.84
1.59%$96,073.00
1.32%$0.734122
0.58%$20.37
8.96%$0.242988
1.35%$0.00000147
1.84%$0.00296706
8.63%$1,834.34
3.02%$113.34
0.31%$0.209921
2.03%$0.499222
-4.59%$0.140128
-0.01%$23.46
-0.67%$3.50
-2.34%$95,570.00
1.07%$0.997172
-0.21%$0.999659
0.02%$0.272893
10.84%$1,955.23
2.45%$0.272597
-0.17%$0.00263449
-2.73%$3,209.74
-2.15%$0.532942
1.23%$2.82
0.19%$0.0313201
1.77%$0.03811491
1.33%$0.00350664
2.83%$1,932.26
1.62%$0.00291038
0.16%$15.74
1.98%$0.983266
4.07%$3.13
13.46%$0.110768
1.39%$0.01311015
3.51%$21.41
0.17%$0.728876
0.71%$0.00000063
4.07%$2,025.64
2.90%$1.098
0.07%Reading
The Zunami Protocol, a decentralized finance (DeFi) platform, confirmed Sunday that its liquidity pool on Curve Finance was attacked, leading to a loss of over $2.1 million. The hack was reported by blockchain security firms PeckShield and Ironblocks.
Zunami Protocol is a yield farming aggregator for stablecoin staking, and maintained its primary "zStables" pool on Curve, which enables the decentralized exchange (DEX) of stablecoins within Ethereum.
Zunami, managed as a decentralized autonomous organization (DAO), promised "the highest APY on the market" and touted $5 million total value locked on its website. The cross-chain protocol claimed to allow users to "diversify their stablecoin portfolio and avoid the risk of crashing one of them."
The scheme used in the attack was a familiar one to blockchain watchers.
"The attacker took [a] flash loan from [the] balancer, then he added liquidity so he [would] be able to change the price significantly and started to trade in Zunami's exchange," Ironblocks explained. "Then he removed the liquidity and changed the price, then he traded back and [returned] the flash loan and got 1,152 ETH to himself.
"Classic price manipulation," Ironblocks concluded.
This morning, Curve Finance said that apart from several Ethereum pools, an Arbitrum-based liquidity pool may have also been "potentially affected" over the weekend. Curve Finance is a popular decentralized exchange (DEX), letting users swap like-assets such as Ethereum for Staked Ethereum, or Tether's USDT for Circle's USDC. It can be a helpful arbitrage tool for many traders should those assets decouple in price from one another. Per initial reports, the platform was exploited on Sunday for ov...
Fellow blockchain analysis firm PeckShield, which has been tracking attacks on Curve, also detected the Zunami attack and notified the protocol on Twitter.
Hi @zunamiprotocol, we have detected an ongoing attack. Users are strongly suggested to take necessary actions.
Here is the encrypted hash: 2638ae2969ce932d61c3ca66f9b8a4a6c01c4d89bb2b34ddcf2c4145960f41c4. Actual hash will be released once the situation is stable.
— PeckShield Inc. (@peckshield) August 13, 2023
"Today's hack leads to more than $2.1 million loss and there are two hack transactions involved," Peckshield explained in a follow up. "It is a price manipulation issue, which can be exploited by donation to incorrectly calculate the price."
"It appears that zStables have encountered an attack. The collateral remain secure, we delve into the ongoing investigation," Zunami posted to Twitter a few moments later. "Please do not buy zETH and UZD at the moment, their emission has been attacked."
The price of both the Zunami USD stablecoin (UZD) and Zunami Ether (zETH) fell precipitously as a result of the hack, with the former collapsing entirely—more than 99%—and the latter plummeting over 88% to $206.
The funds have already been washed through controversial coin mixer Tornado Cash, the firm reported.
Here comes the flow of stolen funds, which have been washed via @TornadoCash pic.twitter.com/SHSajq4fBO
— PeckShieldAlert (@PeckShieldAlert) August 14, 2023
Curve Finance has struggled with multiple attacks in recent weeks, and is still attempting to recover about $19 million stolen by a hacker—and put out a $1.8 million bounty for information leading to the identity of the perpetrator.
Digital assets may be firmly in the mainstream, with institutional involvement and a crypto-friendly president in the White House. But hackers and fraudsters are having a field day so far this year. Crypto users have lost over $1.7 billion to these groups—already 14% more than 2024’s total losses of $1.49 billion, according to blockchain security firm Immunefi. In the same period last year, losses totaled $420 million, the firm said. The report comes amid ongoing concerns about the vulnerabil...
Libre, a regulated real-world asset platform, and the TON Foundation have launched a $500 million tokenized fund on The Open Network, aiming to bring Telegram’s $2.4 billion in corporate debt onto the blockchain for the first time. Dubbed the Telegram Bond Fund, the product allows institutional and accredited investors to gain exposure to Telegram’s outstanding bonds directly through the TON blockchain, according to a statement shared with Decrypt. The fund will also participate in future Telegr...
Solana decentralized exchange Raydium has deployed its native token launchpad, which is designed to rival the popular Pump.fun. This comes almost a month after Pump.fun deployed its own decentralized exchange, cutting ties with Raydium in the process. LaunchLab by Raydium offers a more sophisticated token creation process, compared to Pump.fun’s simplistic approach. The new launchpad allows for deployers to toy with the token supply, how many tokens will be sold on the bonding curve, and how muc...
