December 28, 2020 | AtoZ Markets – Cover's DeFi protocol token depreciated more than 90% after an unknown hacker exploited a vulnerability in the code and was able to increase emissions.
Lead developer at yEarn.Finance, nicknamed banteg, urged users to withdraw liquidity as soon as possible.
Remove COVER liquidity ASAP, the rewards contract has been exploited.
— banteg (@bantg) December 28, 2020
According to him, the project team was unable to stop the release in time, as it slept.
The Cover team couldn't shut off the minting promptly since they were asleep.
— banteg (@bantg) December 28, 2020
We were investigating the reward exploit as pointed out by @Luciano_vPEPO when this tx happened.https://t.co/IJt1an8SbS
Seems like it's not a whitehack transaction since it was followed by selling.
Hours later, Grape.Finance, a “white hacker” claimed responsibility for the attack via its Twitter account, saying all funds had been returned.
As AtoZ Markets has learned, the hacker has cashed out over $4 million including about 1,400 ether, one million DAI, and 90 WBTC.The attacker earlier created 40 quintillion COVER tokens and sold $5 million worth of them on Monday morning. More than $3 million has been returned.
Binance suspends COVER trading after hack attack
Binance cryptocurrency exchange has suspended trading and accepting deposits in DeFi protocol tokens.
#Binance Will Suspend $COVER Trading and $COVER Depositshttps://t.co/cGiEX5BXlX
— Binance (@binance) December 28, 2020
Within a few hours, COVER on the Binance exchange fell from $762 to $70.13. According to CoinGecko, the token is trading at $243 at the time of writing.
Cover Protocol is a peer-to-peer insurance market. It was acquired by the DeFi project yEarn.Finance in late November.
In September, a double spend bug was revealed in the SushiSwap control mechanism, and later, due to a vulnerability, the DeFi protocol lost from $10,000 to $15,000.
Read also: Origin Dollar Hacked for Estimated $7 Million
As a reminder, on December 18, the Warp Finance decentralized platform was attacked using an instant loan. The team, however, managed to recover $5.85 million from the stolen $7.7 million.
Think we missed something? Let us know in the comment section below.