原文(英)Binance Smart Chain Protocol Qubit Finance Hacked For $80M
2022-01-28 19:40:16
Key Takeaways
- A hacker has stolen 206,809 BNB worth $80 million from Qubit Finance.
- The hacker exploited a vulnerability on the protocol’s Ethereum bridge.
- The Qubit team has offered a bounty of $250,000 to the hacker in return for the stolen funds.
Share this article
Qubit Finance, a DeFi protocol on Binance Smart Chain, was exploited today for $80 million worth of BNB tokens.
Qubit Hit by Hack
Another Binance Smart Chain protocol has been hacked.
An unknown hacker was able to drain $80 million worth of BNB tokens from the Binance Smart Chain lending protocol Qubit Finance.
On 27 Jan., at around 9:36 PM UTC, a hacker exploited a vulnerability on the Qubit Bridge, a cross-chain bridge connected to Ethereum. This bridge lets users deposit WETH from Ethereum mainnet into Qubit’s BSC-based smart contract to mint xETH, which can be used as lending collateral on the protocol.
Due to a critical vulnerability in the bridge’s smart contracts, the hacker was able to mint xETH without depositing any WETH, thereby giving them the ability to take out unlimited leveraged loans from Qubit’s pools.
In a Twitter post announcing the exploit, the team reported that the hacker “minted unlimited xETH to borrow on BSC.” Using the xETH as collateral, the hacker proceeded to siphon 206,809 BNB from Qubit Finance, worth about $80 million at the time. The loot can be seen sitting in the hacker’s address.
In an on-chain message directed to the hacker, the Qubit team offered a bounty of $250,000 in return for the stolen funds, as per the protocol’s ongoing bug bounty program with the ethical hacking platform Immunefi. In another post, the Qubit team has also tried to contact the hacker to negotiate.
The Qubit Finance exploit appears to be the seventh-largest DeFi protocol hack in terms of the value of stolen funds, as per data from DeFi Yield. Following the hack, the protocol’s Qubit token has dropped 27% over the past 24 hours.
Since the launch of Binance Smart Chain in September 2020, the chain has become infamous for the amount of hacks, exploits and rug pulls that have taken place on it.
In 2021, several DeFi projects on Binance Smart Chain suffered major hacks or exploits. Some of the most severe include Meerkat Finance’s $31 million hack in March 2021, a Uranium Finance exploit that cost protocol users $50 million in April, and the $88 million attack on Venus Finance in May.
Qubit Finance has not yet commented on plans to reimburse or compensate users for funds lost due to the exploit.
Disclosure: At the time of writing, the author of this piece owned ETH and other cryptocurrencies.
Share this article
Binance Smart Chain DeFi Project Hacked for Million
The BNB-BUSD yield farming “Vault 1” of the DeFi application Meerkat finance, a clone of Yearn Finance on Binance Smart Chain, was drained for $31 million this morning. Meerkat Finance…
BSC Protocol Uranium Finance Hacked for Million
Yet another DeFi project on the Binance Smart Chain has fallen to hackers. This time, Uranium Finance was drained of more than $50 million. Uranium Finance Joins List of Hacked…
Audience Survey: Win A 0 Subscription To Pro BTC Trader
We’re doing this because we want to be better at picking advertisers for Cryptobriefing.com and explaining to them, “Who are our visitors? What do they care about?” Answer our questions…
Problems Abound on BSC as Bunny Finance Suffers Attack
An attacker used a flash loan to exploit the Binance Smart Chain yield aggregator Bunny Finance earlier this morning. They dumped BUNNY tokens on the market, causing prices to plummet…
元ソース
続き・詳細はこちら
Binance Smart Chain Protocol Qubit Finance Hacked For $80M