Rekt - Value DeFi

Did they really know flashloan?

The value of a reputation is volatile. Humility brings stability, boast too much and you end up rekt.

Value DeFi was exploited today for $7,000,000. Another harsh lesson from the flash loan family.

Price before hack - $2.73

Price after hack - $1.87

Releasing this tweet a day before the hack?

PRICELESS

(The tweet has since been deleted, but our screenshot lives on.)

Despite their bold claims of security, it appears the Value DeFi team didn’t know that withdrawals could be made not only through the main Bank contract, but also from the Vault contract through Proxy.

Value DeFi used Curve spot price as an oracle.

The manipulation occurred at steps 5 and 6.

Withdrawal at step 7 is using the wrong Curve function to do the maths.

Credit @emilianobonassi

Credit @FrankResearcher 15:24 - The exploit came at a particularly bad time for Value DeFi, just 20 minutes before they were due to start an AMA.

At 15:41 a user asked about the drop in TVL, which had been over $11M earlier in the day

At 15:42, concern was growing, and group members hoped for a UI bug.

Then at 15:49 the etherscan link dropped into the chat

$7,000,000 had been removed from the Value DeFi vault, with $2,000,000 and the following note returned.

At 16:00, just as the AMA was due to start, Stani Kulechov put out the following tweet.

Meanwhile, in the AMA:

The Value team acknowledged the hack in their Discord at 16:05, yet the AMA questions continued for 40 minutes on unrelated topics, until…

$FARM, $AKRO and now $VALUE have been victims of the flash loan, as harsh lessons are dealt out to weak protocols, exposing the weaknesses in their platforms before returning some amount as a sign of “good faith”.

Only semi-reputable projects have been targeted; those with high activity and a reasonable TVL.

Are these attacks an attempt to teach us something?

Flash loans are a controversial topic in the DeFi space, they’ve been behind many attacks and exploits in recent months, however it could be argued that this is simply accelerating our learning process and aiding in the removal of weak protocols.

Without flash loans, we would be waiting for a whale to do the same. It’s best that we pass through this stage now, during the genesis stage of decentralised finance, as people who are prepared to take risks are experimenting, trying, and releasing new products daily.

Flash loans are here to teach and humble anyone who rushes this process. They are the pinnacle of DeFi - impossible anywhere else, flash loans are a perfect example of the new capabilities that this technology brings.

A feature of DeFi, not an exploit of the code.

The strongest protocols aren’t affected by these attacks. Some are even benefiting.

Flash loans forcibly raise the bar for DeFi developers.

Until the new standards are met, people and protocols will get rekt. It will be painful, and it will be public, but because of this we will learn. DeFi will get stronger, and we will develop better practices, stronger code, and a safer environment for future users.

REKT는 익명 작성자들에 의한 공공 플랫폼이며, REKT에 작성된 관점이나 내용에 대해서 그 어떤 책임도 지지 않습니다.

기부 (ETH / ERC20): 0x3C5c2F4bCeC51a36494682f91Dbc6cA7c63B514C

disclaimer:

REKT는 당사 웹 사이트의 익명의 작성자 또는 REKT에 의해 게시되거나 관련된 서비스에서 게시되는 콘텐츠에 대해 어떠한 책임도 지지 않습니다. 당사는 익명 작성자들의 행동 및 게시물에 대한 규칙을 제공하지만, 익명의 작성자가 웹 사이트 또는 서비스에 게시, 전송 혹은 공유한 내용을 통제하거나 책임지지 않으며, 귀하가 웹 사이트 또는 서비스에서 직면할 수 있는 불쾌함, 부적절함, 음란함, 불법 또는 기타 해로운 콘텐츠에 대해서도 책임을 지지 않습니다. REKT는 당사 웹 사이트 또는 서비스 사용자의 온라인 또는 오프라인 행위에 대한 책임을 지지 않습니다.

Value DeFi - REKT

Iron Finance - REKT

Blood in the streets II

Furucombo - REKT

구독하기 지금