$97,486.00
3.12%$3,343.57
7.38%$246.38
3.22%$623.23
0.96%$1.13
0.16%$0.388342
-0.56%$0.999792
-0.14%$3,342.46
7.38%$0.800037
-4.08%$0.200948
1.46%$35.81
2.00%$0.00002483
1.30%$3,954.61
7.56%$97,461.00
3.44%$5.54
2.10%$3.67
-0.24%$493.54
10.31%$3,347.56
7.65%$15.25
2.17%$0.00002121
5.59%$5.93
-1.25%$8.85
7.82%$0.241708
-1.44%$5.77
1.14%$89.88
3.85%$12.17
-0.71%$3,521.48
7.60%$9.32
3.31%$1.004
0.87%$0.183057
1.05%$0.123319
-1.67%$9.41
1.11%$27.80
6.18%$0.00005304
-1.95%$0.156765
-5.15%$7.55
-4.77%$505.75
5.64%$1.001
-0.35%$0.453191
0.02%$24.63
2.22%$1.28
-0.12%$3.30
1.39%$0.802112
16.07%$3.49
-8.48%$161.14
0.06%$1.96
5.04%$4.60
3.52%$0.03343348
3.31%$44.93
2.27%$0.799719
9.08%$0.00026395
9.77%$6.43
-0.76%$2.00
13.92%$167.28
2.92%$24.71
0.88%$0.999118
-0.16%$1.35
1.98%$5.28
3.83%$0.225941
-2.96%$0.496486
2.88%$3,346.38
7.33%$0.707498
2.35%$1.41
3.48%$5.40
2.97%$0.213459
-5.01%$3,735.84
7.29%$5.90
4.68%$1.69
0.55%$0.169959
-2.16%$0.572463
6.71%$3,500.08
7.23%$1.63
-1.69%$97,738.00
3.54%$2.25
1.10%$97,502.00
3.03%$1.12
0.34%$3,429.33
7.49%$0.415313
0.45%$1.016
0.02%$1.49
-6.31%$1,596.88
4.79%$70.96
1.92%$11.08
0.98%$304.34
3.55%$89.36
1.17%$9.92
1.15%$18.26
1.51%$0.02984728
2.21%$0.02227825
-1.93%$1.13
5.42%$0.00000115
5.37%$1.24
6.66%$0.710508
1.99%$0.00000283
23.65%$97,892.00
3.84%$1.059
-6.85%$0.508398
7.87%$0.453495
0.20%$0.02000171
0.13%$3.15
1.09%$3,342.09
7.28%$0.661889
1.66%$0.02081693
-0.58%$5.82
0.19%$260.63
3.62%$97,520.00
3.56%$97,749.00
3.88%$3.82
-3.26%$13.24
4.38%$0.0104723
-1.79%$11.53
-1.26%$1.30
1.78%$1.29
4.33%$0.792346
-7.18%$0.00004537
1.43%$5.82
2.40%$0.95649
1.07%$5.33
5.58%$0.14741
1.65%$30.70
1.35%$1.18
6.60%$0.00200125
6.87%$0.35072
1.64%$1.30
3.57%$3,407.45
6.37%$0.388896
-0.56%$0.67104
1.60%$37.70
1.99%$0.00787348
3.07%$250.11
3.11%$0.411509
0.95%$0.998434
-0.42%$0.00726947
0.13%$0.154403
3.97%$3,354.52
7.91%$0.01003528
2.42%$264.75
2.94%$0.07516
0.26%$45.47
8.52%$3,348.92
7.64%$2.12
3.60%$2,671.15
0.99%$0.996682
-0.05%$0.23426
0.79%$19.24
6.84%$0.740788
3.88%$0.04162178
0.66%$0.17498
-0.85%$0.01349433
4.32%$0.00010988
2.78%$3,611.17
7.13%$33.95
3.90%$1.83
5.03%$2.44
0.82%$1.29
4.04%$1.28
1.69%$0.577041
3.51%$0.00823259
1.53%$0.082732
4.39%$3,337.03
7.25%$1.95
2.04%$0.081476
-0.82%$98,659.00
5.65%$0.999567
-0.25%$0.146986
3.48%$1.078
-0.26%$0.522493
73.54%$0.00154022
0.22%$2,675.73
0.90%$0.563009
1.62%$97,398.00
3.06%$1.44
2.66%$0.539108
0.19%$3,329.00
8.16%$0.253133
2.93%$0.00000024
2.34%$0.46606
2.52%$0.168505
3.03%$0.405527
2.02%$0.99845
-0.47%$97,814.00
3.91%$0.505331
2.87%$0.066192
-0.39%$8.58
-5.16%$55.32
1.50%$3,331.90
7.16%$0.00000048
1.00%$0.47477
1.65%$2.50
6.35%$0.067743
0.42%$3.69
-9.68%$1.064
-0.64%$3,589.34
7.54%$0.340439
4.16%$0.23342
4.59%$3,330.55
7.03%$7.00
6.49%$0.998474
-0.26%$8.40
2.14%$0.00781297
2.49%$0.01340434
1.32%$3,455.27
6.15%$98.86
-3.67%$0.04339855
2.87%$0.04247613
10.31%$0.98248
-1.74%$0.998841
-0.35%$0.993567
-0.90%$1.069
-0.20%$3.06
10.35%$3.60
3.30%$0.02072972
1.29%$0.948512
0.07%$0.711784
5.64%$3,670.70
6.91%$1,958.47
3.22%$0.694813
2.25%$10.60
2.54%$0.548171
-2.44%$3.53
6.16%$0.00213993
2.11%$0.376681
62.67%$0.00461308
-1.17%$97,290.00
3.04%$0.43424
1.05%$0.909533
6.36%$1.002
-0.45%$0.00
2.33%$1.76
13.25%$3,515.55
6.45%$0.362231
1.27%$0.02084898
0.74%$0.323799
7.78%$0.201705
1.59%$41.84
2.48%$0.04428827
-11.29%$1.38
2.28%$0.686242
0.98%$29.39
4.97%$0.00608507
0.82%$96,204.00
2.78%$1.62
5.57%$0.03416407
2.27%$3.24
5.04%$4.36
2.16%$21.04
4.76%$0.339328
26.00%$21.40
1.68%
An exploit in decentralized finance (DeFi) protocol Qubit Finance enabled one hacker to walk away with $80 million in stolen crypto yesterday.
The specific smart contract flaw that enabled the attack was located in X-Bridge, a cross-chain bridge that facilitates easy token swaps between Ethereum and Binance Smart Chain.
This flaw enabled the attacker to input malicious data without depositing Ethereum and receive $185 million worth in Qubit xETH (an asset that represents bridged Ethereum on the Binance Smart Chain) in return.
The attacker then used this money as collateral to "borrow" about $80 million worth of crypto from various lending pools.
The full breakdown of purloined assets amounts to 15,688 wETH ($37.6 million), 767 BTC-B ($28.5 million), approximately $9.5 million in stablecoins, and $5 million in CAKE, BUNNY, and MDX tokens, according to audit firm CertiK.
Since the attacker never converted their qXETH "collateral," the total cost of the theft to Qubit Finance is $80 million.
Qubit Finance published a blog post today with a play-by-play breakdown of the attack in its entirety.
On Qubit's Twitter page, the team also tweeted that it is "glad to have a conversation with [the attacker]." It attached a screenshot message saying that Qubit is "prepared to offer [the attacker] the maximum bounty for the revealed exploit" in order to "minimize the effect on the community."
[Our message to the exploiter]
The team is glad to have a conversation with you.https://t.co/4SxtuD6pQY pic.twitter.com/V9bICKvWda— Qubit Finance (@QubitFin) January 28, 2022
Blockchain security analysts Peckshield tweeted on Friday morning that it had audited Qubit Finance's lending protocol and will provide further details soon.
It seems the QBridge of @QubitFin is hacked to mint huge amount of xETH collateral and drain the pool funds about $80M. Please note we audited the Qubit lending, not the QBridge! More to come...
— PeckShield Inc. (@peckshield) January 27, 2022
While this attack has been the largest this year, it wasn't the first cross-chain hack in 2022.
Last week, a white-hat hacker stole $1.73 million from Multichain before returning $900,000 and pocketing the rest as a bounty.
As different blockchains become popular and cross-chain activity grows alongside it, projects like Qubit and Multichain are expected to become key targets for hackers.
