$96,886.00
-0.55%$3,353.27
-3.39%$2.24
-1.61%$664.24
-2.80%$182.91
-6.15%$0.31897
-1.62%$0.998984
-0.14%$3,348.37
-3.45%$0.90056
-4.99%$0.245567
-1.30%$37.42
-5.82%$22.24
-4.58%$3,979.82
-3.30%$5.32
-3.62%$4.41
-3.27%$96,588.00
-0.41%$0.00002167
-4.58%$33.93
8.45%$0.354004
-4.72%$6.99
-4.38%$0.253104
-5.63%$3,354.24
-3.27%$455.29
1.02%$9.33
-1.12%$13.85
0.56%$100.55
-0.43%$0.00001746
-5.36%$3,518.87
-3.96%$5.03
-6.36%$0.998998
-0.13%$4.21
-3.60%$9.39
-7.24%$0.998591
-0.17%$10.05
-5.31%$299.47
-8.85%$0.156652
-4.06%$0.475407
-4.61%$1.17
-8.73%$26.15
-4.52%$7.08
-5.81%$0.04538543
-5.05%$24.23
-1.03%$187.30
-3.05%$3.63
-5.71%$455.51
-6.54%$1.26
-7.35%$0.750189
-6.03%$1.025
-12.19%$4.92
-4.95%$0.118404
-5.31%$0.329957
-4.06%$0.970224
-1.98%$45.34
-3.38%$6.52
-5.32%$1.66
-7.14%$2.44
-12.01%$1.66
-7.97%$1.75
-7.82%$4.98
-5.12%$0.00003016
-10.01%$1.33
-7.93%$2.15
1.89%$0.916737
-7.12%$3,355.21
-3.41%$96,934.00
-0.49%$20.50
-7.30%$0.205355
-5.57%$1.88
-12.61%$0.4252
-2.68%$2.20
-6.91%$3,456.77
-3.43%$0.996288
-0.33%$0.02730646
-10.98%$4.96
-5.92%$3,737.74
-3.70%$21.00
10.79%$13.17
-0.61%$0.00016658
-7.32%$0.03277168
-6.11%$108.86
-3.36%$3,529.23
-3.55%$1.68
-2.90%$0.02704305
-3.84%$96,800.00
-0.41%$0.03509171
-6.29%$1,634.51
-3.60%$3.31
-0.70%$0.0266897
-7.31%$0.999043
-0.22%$0.564407
-5.37%$1.35
-2.49%$11.17
-0.59%$1.28
1.79%$0.360582
-6.83%$0.222807
-4.56%$96,799.00
-0.40%$4.40
-5.64%$0.126776
-6.63%$3,451.70
-3.09%$0.792987
-5.29%$6.78
-4.66%$186.99
-6.06%$34.39
-6.99%$0.075504
-0.17%$0.817638
-8.05%$0.707735
-4.86%$1.53
-7.51%$0.47784
-4.92%$0.952086
-4.66%$53.06
-4.54%$0.00000108
-2.31%$0.289354
-4.91%$1.10
-3.87%$15.64
-9.53%$228.19
-5.67%$1.43
-7.38%$0.79289
-8.20%$13.98
-4.44%$6.15
-4.36%$34.00
-5.79%$0.475083
-4.70%$96,120.00
-0.46%$0.472356
-6.09%$96,370.00
-0.56%$53.39
-1.60%$3,346.04
-3.37%$5.06
-6.27%$1.13
-6.63%$2.92
-5.04%$3.74
-9.61%$0.00000202
-10.22%$3.14
-5.71%$0.084105
-6.59%$0.768054
-21.38%$3,351.00
-3.42%$0.997573
-0.13%$0.157086
-5.25%$0.671638
-11.15%$0.263641
-7.47%$0.603521
-4.10%$81.01
-4.88%$3,350.35
-3.53%$194.74
-6.14%$1.89
-7.20%$2.37
-6.67%$0.714888
-11.80%$1.53
-2.66%$264.79
-2.49%$0.00003446
-4.65%$2.00
-8.84%$0.722099
2.45%$96,903.00
0.54%$0.00666602
-5.40%$0.750307
-1.94%$20.72
-7.15%$0.319103
-1.72%$2,627.22
-0.09%$0.994321
-0.31%$1.43
-7.46%$0.00629439
-5.97%$0.00758697
-5.79%$0.171853
-8.15%$3,531.09
-3.51%$0.615702
-10.83%$5.53
-3.46%$2.49
1.90%$3,630.12
-3.41%$0.00010767
-2.79%$0.01082198
-5.03%$0.00824222
-5.56%$0.00
-7.39%$0.56745
-17.82%$3,352.66
-3.42%$18.29
-8.05%$1.018
-0.27%$26.27
-6.38%$0.00612794
-6.55%$1.062
-5.23%$0.080313
-6.62%$0.257339
-6.19%$0.382582
-4.54%$0.077588
-0.78%$10.43
-4.55%$0.998339
-0.18%$96,867.00
-0.53%$2,619.15
-0.45%$1.25
-11.51%$9.08
-4.10%$96,071.00
-0.08%$0.00000052
-1.76%$1.22
-2.36%$13.84
3.90%$3,344.14
-3.32%$0.99938
-0.28%$31.05
-2.50%$1.053
-16.30%$3,357.43
-3.24%$1.45
-6.76%$0.0105885
-5.79%$0.473246
-1.92%$0.04887246
-8.97%$4.68
-3.86%$0.42535
-4.10%$96,612.00
-0.33%$0.060153
-3.77%$1.064
1.17%$0.294117
-5.13%$0.064448
-1.11%$3,605.74
-3.35%$3,485.95
-4.08%$0.00580823
-6.93%$35.66
-7.35%$27.13
1.04%$0.00617816
-6.90%$0.00236504
-5.16%$1.97
-7.73%$0.0053141
-8.40%$0.997954
0.36%$5.19
-0.59%$1.079
-0.03%$0.02078288
-3.86%$88.79
-0.62%$0.00094957
-13.47%$3.07
-8.89%$0.220026
-4.53%$0.999686
-0.07%$0.068086
-8.77%$0.454204
-4.21%$0.20488
-6.03%$0.00000305
-11.12%$3,706.02
-3.20%$0.0376421
-2.81%$0.999204
-0.54%$2.92
-5.22%$0.656827
-4.94%$0.00000017
-6.28%$0.865228
-3.71%$3.31
-7.38%$3,361.03
-3.01%$0.355688
-3.21%$0.0350782
-3.99%$0.133219
-8.21%$3,545.90
-3.27%$0.01032237
-6.14%$0.704614
2.29%$44.11
-5.92%$0.03655068
-1.42%$1,948.53
-0.36%
An exploit in decentralized finance (DeFi) protocol Qubit Finance enabled one hacker to walk away with $80 million in stolen crypto yesterday.
The specific smart contract flaw that enabled the attack was located in X-Bridge, a cross-chain bridge that facilitates easy token swaps between Ethereum and Binance Smart Chain.
This flaw enabled the attacker to input malicious data without depositing Ethereum and receive $185 million worth in Qubit xETH (an asset that represents bridged Ethereum on the Binance Smart Chain) in return.
The attacker then used this money as collateral to "borrow" about $80 million worth of crypto from various lending pools.
The full breakdown of purloined assets amounts to 15,688 wETH ($37.6 million), 767 BTC-B ($28.5 million), approximately $9.5 million in stablecoins, and $5 million in CAKE, BUNNY, and MDX tokens, according to audit firm CertiK.
Since the attacker never converted their qXETH "collateral," the total cost of the theft to Qubit Finance is $80 million.
Qubit Finance published a blog post today with a play-by-play breakdown of the attack in its entirety.
On Qubit's Twitter page, the team also tweeted that it is "glad to have a conversation with [the attacker]." It attached a screenshot message saying that Qubit is "prepared to offer [the attacker] the maximum bounty for the revealed exploit" in order to "minimize the effect on the community."
[Our message to the exploiter]
The team is glad to have a conversation with you.https://t.co/4SxtuD6pQY pic.twitter.com/V9bICKvWda— Qubit Finance (@QubitFin) January 28, 2022
Blockchain security analysts Peckshield tweeted on Friday morning that it had audited Qubit Finance's lending protocol and will provide further details soon.
It seems the QBridge of @QubitFin is hacked to mint huge amount of xETH collateral and drain the pool funds about $80M. Please note we audited the Qubit lending, not the QBridge! More to come...
— PeckShield Inc. (@peckshield) January 27, 2022
While this attack has been the largest this year, it wasn't the first cross-chain hack in 2022.
Last week, a white-hat hacker stole $1.73 million from Multichain before returning $900,000 and pocketing the rest as a bounty.
As different blockchains become popular and cross-chain activity grows alongside it, projects like Qubit and Multichain are expected to become key targets for hackers.
