{"id":695,"date":"2022-06-18T17:46:03","date_gmt":"2022-06-18T17:46:03","guid":{"rendered":"https:\/\/cryptoteambuild.com\/blog\/inverse-finance-lost-1-2m-in-a-flash-loan-oracle-exploit-details\/"},"modified":"2022-06-18T17:46:03","modified_gmt":"2022-06-18T17:46:03","slug":"inverse-finance-lost-1-2m-in-a-flash-loan-oracle-exploit-details","status":"publish","type":"post","link":"https:\/\/cryptoteambuild.com\/blog\/inverse-finance-lost-1-2m-in-a-flash-loan-oracle-exploit-details\/","title":{"rendered":"Inverse Finance Lost $1.2M in a Flash Loan Oracle Exploit; Details"},"content":{"rendered":"<div id=\"genesis-content\">\n<p>You are here: <span itemprop=\"itemListElement\" itemscope=\"\" itemtype=\"https:\/\/schema.org\/ListItem\"><a href=\"https:\/\/www.tronweekly.com\/\" itemprop=\"item\"><span itemprop=\"name\">Home<\/span><\/a><meta content=\"1\" itemprop=\"position\"><\/span> <span aria-label=\"breadcrumb separator\">\/<\/span> <span itemprop=\"itemListElement\" itemscope=\"\" itemtype=\"https:\/\/schema.org\/ListItem\"><a href=\"https:\/\/www.tronweekly.com\/category\/news\/\" itemprop=\"item\"><span itemprop=\"name\">News<\/span><\/a><meta content=\"2\" itemprop=\"position\"><\/span> <span aria-label=\"breadcrumb separator\">\/<\/span> <span itemprop=\"itemListElement\" itemscope=\"\" itemtype=\"https:\/\/schema.org\/ListItem\"><a href=\"https:\/\/www.tronweekly.com\/category\/news\/scam-alerts\/\" itemprop=\"item\"><span itemprop=\"name\">Crypto Scam<\/span><\/a><meta content=\"3\" itemprop=\"position\"><\/span> <span aria-label=\"breadcrumb separator\">\/<\/span> Inverse Finance Lost $1.2M in a Flash Loan Oracle Exploit; Details<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" alt=\" Inverse Finance Lost $1.2M in a Flash Loan Oracle Exploit\" data-lazy-sizes=\"(max-width: 1200px) 100vw, 1200px\" data-lazy-src=\"https:\/\/www.tronweekly.com\/wp-content\/uploads\/2022\/06\/shutterstock_2128750253-scaled-1.webp\" data-lazy-srcset=\"https:\/\/www.tronweekly.com\/wp-content\/uploads\/2022\/06\/shutterstock_2128750253-scaled-1.webp 1200w, https:\/\/www.tronweekly.com\/wp-content\/uploads\/2022\/06\/shutterstock_2128750253-scaled-1-300x184.webp 300w, https:\/\/www.tronweekly.com\/wp-content\/uploads\/2022\/06\/shutterstock_2128750253-scaled-1-1024x628.webp 1024w, https:\/\/www.tronweekly.com\/wp-content\/uploads\/2022\/06\/shutterstock_2128750253-scaled-1-768x471.webp 768w\" height=\"736\" src=\"data:image\/svg+xml,%3Csvg%20xmlns='http:\/\/www.w3.org\/2000\/svg'%20viewBox='0%200%201200%20736'%3E%3C\/svg%3E\" title=\" Inverse Finance Lost $1.2M in a Flash Loan Oracle Exploit; Details 1\" width=\"1200\"><\/p>\n<article aria-label=\"Inverse Finance Lost $1.2M in a Flash Loan Oracle Exploit; Details\" itemscope=\"\" itemtype=\"https:\/\/schema.org\/CreativeWork\">\n<header>\n<p><time datetime=\"2022-06-17T18:31:40+08:00\" itemprop=\"datePublished\">June 17, 2022<\/time> by <span itemprop=\"author\" itemscope=\"\" itemtype=\"https:\/\/schema.org\/Person\"><a href=\"https:\/\/www.tronweekly.com\/author\/vignesh\/\" itemprop=\"url\" rel=\"author\"><span itemprop=\"name\">Vignesh Karunanidhi<\/span><\/a><\/span> <\/p>\n<\/header>\n<div itemprop=\"text\">\n<p>Inverse Finance was targeted with a flash loan hack merely two months after losing $15.6 million in a price oracle tampering assault. The attackers made off with $1.26 million in Tether (USDT) and Wrapped Bitcoin (wBTC).<\/p>\n<p>A flash loan is a sort of crypto loan that is usually acquired and returned in a single transaction, while Inverse Finance is an Ethereum-based decentralized finance (DeFi) system.<\/p>\n<p>The most recent vulnerability was manipulating the pricing oracle for a liquidity provider (LP) token used by the protocol&rsquo;s money market application with a flash loan. <\/p>\n<p>This permitted the attacker to borrow a higher quantity of Dola (DOLA), the protocol&rsquo;s stablecoin, than the sum of collateral they submitted, allowing them to steal more of the protocol&rsquo;s stablecoin.<\/p>\n<h2> Inverse Finance suffered a similar attack<\/h2>\n<p>The hack follows just over two months after an identical <a data-id=\"https:\/\/twitter.com\/InverseFinance\/status\/1510282040809299972\" data-type=\"URL\" href=\"https:\/\/twitter.com\/InverseFinance\/status\/1510282040809299972\" rel=\"noreferrer noopener\" target=\"_blank\">April 2 exploit<\/a>, in which <a data-id=\"https:\/\/www.tronweekly.com\/inverse-finance-loses-15m-oracle-manipulation\/\" data-type=\"URL\" href=\"https:\/\/www.tronweekly.com\/inverse-finance-loses-15m-oracle-manipulation\/\" rel=\"noreferrer noopener\" target=\"_blank\">attackers<\/a> used a pricing oracle to intentionally alter collateralized token prices in order to drain cash.<\/p>\n<p>Inverse Finance responded to the attack by temporarily suspending borrowing and removing DOLA from the money market while it examined the event, claiming that no user funds were at risk.<\/p>\n<p>It was eventually revealed that the incident solely harmed the attacker&rsquo;s deposited collateral and that it only acquired a liability to itself due to the stolen DOLA. The attacker was asked to return the funds in exchange for a &ldquo;generous prize.&rdquo;<\/p>\n<p>The attackers made a total of 99,976 USDT and 53.2 wBTC from the attack, which they converted to ETH before sending through the cryptocurrency mixer Tornado Cash to hide their illicit earnings.<\/p>\n<p>Attackers made off with $15.6 million in Ether (ETH), wBTC, Yearn.Finance (YFI) and DOLA in the previous attack in April.<\/p>\n<p>In March, the DeFi marketplace Deus Finance was hacked, with attackers altering a price pairing within an oracle, resulting in a gain of 200,000 Dai (DAI) and 1101.8 ETH, valued at over $3 million at the time.<\/p>\n<p>Beanstalk Farms, a credit-based stablecoin system, lost all of its $182 million in collateral in a flash loan assault triggered by two malicious governance proposals, which ultimately drained the protocol&rsquo;s money.<\/p>\n<\/div>\n<\/article>\n<\/div>\n<p><a href=\"https:\/\/www.tronweekly.com\/inverse-finance-suffers-flash-loan-exploit\/\" class=\"button purchase\" rel=\"nofollow noopener\" target=\"_blank\">Read More<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>You are here: Home \/ News \/ Crypto Scam \/ Inverse Finance Lost $1.2M in a Flash Loan Oracle Exploit; Details June 17, 2022 by Vignesh Karunanidhi Inverse Finance was targeted with a flash loan hack merely two months after losing $15.6 million in a price oracle tampering assault. The attackers made off with $1.26 million in Tether (USDT) and Wrapped Bitcoin (wBTC). A flash loan is a sort of crypto loan that is usually acquired and returned in a single transaction, while Inverse Finance is an Ethereum-based decentralized finance (DeFi) system. The most recent vulnerability was manipulating the pricing [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":696,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[71,276],"_links":{"self":[{"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/posts\/695"}],"collection":[{"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/comments?post=695"}],"version-history":[{"count":0,"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/posts\/695\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/media\/696"}],"wp:attachment":[{"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/media?parent=695"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/categories?post=695"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoteambuild.com\/blog\/wp-json\/wp\/v2\/tags?post=695"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}