Key Takeaways
- TempleDAO and STAX Finance grew to become the targets of a $2.3 million exploit that passed off on October 11.
- The attacker carried out the exploit by forging a wise contract to name a perform and withdraw funds.
- Although sure staking contracts had been exploited, TempleDAO says that its core contracts are safe.
Share this text
TempleDAO and its related undertaking STAX Finance have been hacked for roughly $2.3 million.
TempleDAO and STAX Hacked
TempleDAO and STAX have been exploited.
STAX acknowledged the assault in a maintenance note. It wrote that the attacker managed to steal a complete of 321,154 xLP on October 11. These tokens had been swapped for 1.3 million FRAX and 1.4 million TEMPLE. The TEMPLE tokens had been then bought for one more token, FRAX.
The market worth of these tokens locations the worth of the assault above $2.3 million. PeckShield estimates that 1,831 ETH ($2.34 million) had been stolen within the assault.
STAX has urged customers to not deposit extra funds into its contracts till the issue has been resolved, noting that it has frozen the dApp to offer unintentional entry.
The undertaking wrote that the problem is “now underneath management and the exploiter can do no additional hurt,” including that “remediations can be made for all affected customers.”
STAX added that it’s “following up with Binance” on the matter. Presumably, it’s working to trace or block funds that transfer via the change. Some reports counsel that the attacker initially moved his funds from a Binance account.
Lastly, STAX stated that it’ll create a white hat bounty to encourage the return of stolen funds and enhance the bounty that it already affords via Hats Finance.
The assault was attainable due to improper entry management in a staking-related sensible contract. The attacker was capable of forge one other sensible contract to name a selected perform in that contract and request the motion of funds.
TempleDAO has emphasised the restricted scope of the assault, noting that its “vault contracts share no widespread code with STAX, have been audited by PeckShield, and stay safe.”
TempleDAO is alleged to have $100 million in stablecoins in these core contracts. Its whole worth locked additionally quantities to roughly $56 million at current.
Disclosure: On the time of writing, the creator of this piece owned BTC, ETH, and different cryptocurrencies.
