Skip to main content

BSC Defi Protocol Burgerswap Loses $7.2 Million from a Flash Loan Attack

BSC Defi Protocol Burgerswap Loses $7.2 Million from a Flash Loan Attack

Another Binance Smart Chain project has been hit with a flash loan attack according to a post mortem written by the Burgerswap team. The project’s official Twitter account said at around 3 a.m. on Friday, Burgerswap suffered from a flash loan attack with the hackers stealing $7.2 million in funds.

Binance Smart Chain Defi Protocol Burgerswap Drained for $7.2M

  • The Burgerswap project explained on Friday that the project saw $7.2 million in funds drained after a malicious flash loan attack.
  • “At around 3 am on May 28th (UTC+8) Burgerswap on the BSC chain encountered a flash loan attack; $7.2M was stolen from Burgerswap in 14 transactions,” the official Twitter account noted.

  • Burgerswap is a decentralized finance (defi) project that leverages the Binance Smart Chain (BSC). Similar to Sushiswap or Uniswap, the Burgerswap protocol allows users to swap between tokens issued on BSC. Users can also add liquidity and earn the project’s native token dubbed BURGER.
  • “Hackers created their own Fake Coin (non-standard BEP-20 tokens) and formed a new trading pair with BURGER,” Burgerswap added. “By adjusting the routing, [the] attacker created BURGER -> Fake Coin -> WBNB routing; through BURGER -> Fake Coin trading pair, attacker re-entered Burgerswap through Fake Coin & manipulated number of reserve0 and reserve1 in the pair’s contract, causing the price to change,” the team further noted.
  • Burgerswap is not the first BSC project that’s having issues with flash loan attacks, as hackers have seemingly made a sport of it in recent times. A total of $6 million was stolen from two BSC projects last week, as Pancakebunny and Bogged Finance saw $3 million drained from each defi project.
  • Flash loans have been a problem for a number of defi protocols in 2020 and into 2021. The specialized exploit has been a common attack in the defi world ever since the defi margin trading protocol Bzx was attacked.
  • Flash loans are smart contract-based schemes that allow the issuance of loans within a single transaction or attack. In the Burgerswap instance, the hacker got away with WBNB, BUSD, ETH, USDT, BURGER, XBURGER, and ROCKS.
  • Burgerswap explained on Twitter that the blockchain security company Peckshield helped with the investigation.
  • The Burgerswap flash loan hack also follows the recent BSC announcement from Ciphertrace. The blockchain surveillance firm has added analytics support for the Binance Smart Chain to track illicit transactions.

What do you think about the recent Burgerswap hack and the flash loan attacks against multiple Binance Smart Chain defi projects? Let us know what you think about this subject in the comments section below.



from Bitcoin News https://ift.tt/3uu4kKg

Comments

Popular posts from this blog

Deep Web Roundup: Dream Adds Monero and Bitcoin Tumbler “Chip Mixer” Launches

The darknet has been quiet of late, which is the way it’s meant to be. No news means no mega busts, honeypots, or mass market shutdowns. Even when it’s out of the spotlight though, the deep web is quietly making news, whether trialling the latest privacy coins or the newest coin mixers that promise to restore a little of the privacy that’s being stripped away from bitcoin users on a daily basis. Also read: U.S. Agency ICE Conducts Investigations That Exploit Blockchain Activity The Battle for Privacy Heats Up Privacy is all relative, but of late there’s been relatively little privacy to be enjoyed by bitcoin users. Blockchain monitoring software is becoming more sophisticated and more common, with U.S. law enforcement agencies using it to profile and hunt down deep web users. Chip Mixer is a relatively new bitcoin tumbler that’s designed to restore some of that privacy. Available on both the clearnet and darknet, the service uses a variety of techniques to obfuscate blockchain m

Custodial Lightning Network Service Attack Discovered by LN ‘Newbie’ — Hacker Strikes 6 LN Custodians

On September 18, a Redditor posted to the r/bitcoin forum and explained how he discovered a way to “attack [the] lightning Network’s custodial services.” The Reddit account dubbed “Reckless Satoshi” wanted to figure out if a “discrepancy between real routing fees and service’s transaction fee can be exploited for a profit.” The researcher disclosed that he wanted to see how large the damage could be and said “it is bad.” 6 Lightning Network Custodial Services Attacked, Researcher Discloses Findings to Offenders Prior to Public Disclosure A Redditor called Reckless Satoshi published a disclosure post on r/bitcoin this past Saturday and disclosed how he had found a vulnerability with routing fees and some of the Lightning Network’s custodial services. The research attack was done in good faith and after it was complete he disclosed the bugs to the offending services before publishing his findings. Reckless Satoshi used the Lightning Network (LN) attack on six different services incl

International Crypto Exchange Luno Adds Bitcoin Cash Trading

Luno exchange has added bitcoin cash trading to the platform following feedback from its client base. BCH is now only the third cryptocurrency available for trading on the exchange, in addition to BTC and ETH , but more options could be on the way once Luno determines that they are credible enough. Also Read: Bitflyer Adds Bitcoin Cash Trading Across Europe and the US Luno Adds Bitcoin Cash Trading Luno, the London-headquartered company formerly known as Bitx, recently announced that bitcoin cash was made available on its cryptocurrency exchange. Starting from Monday, September 23, customers at Luno are now able to store, buy and sell BCH on the platform. The reason given for adding BCH to the exchange is feedback from users in developing markets that convinced Luno to expand their offering from previously just BTC and ETH . Marcus Swanepoel, CEO of Luno, said , “We are in a new and exciting financial era. Developing economies are leading the large-scale adoption and appli