Sunday, June 8, 2025
No Result
View All Result
Coins League
  • Home
  • Bitcoin
  • Crypto Updates
    • Crypto Updates
    • Altcoin
    • Ethereum
    • Crypto Exchanges
  • Blockchain
  • NFT
  • DeFi
  • Metaverse
  • Web3
  • Scam Alert
  • Regulations
  • Analysis
Marketcap
  • Home
  • Bitcoin
  • Crypto Updates
    • Crypto Updates
    • Altcoin
    • Ethereum
    • Crypto Exchanges
  • Blockchain
  • NFT
  • DeFi
  • Metaverse
  • Web3
  • Scam Alert
  • Regulations
  • Analysis
No Result
View All Result
Coins League
No Result
View All Result

Decoding Hopelend’s $835k Exploit

November 15, 2023
in DeFi
Reading Time: 3 mins read
0 0
A A
0
Home DeFi
Share on FacebookShare on TwitterShare on E Mail


Learn Time: 3 minutes

Abstract:

On the 18th of October 2023, HopeLend Protocol on the Ethereum chain was attacked. The assault was made doable by a Precision Loss vulnerability. Round $835k was stolen from the exploit.

About Undertaking:

HopeLend is a decentralized, non-custodial lending protocol. To be taught extra about them, try their documentation.

Vulnerability Evaluation & Influence:

On-Chain Particulars:

Attacker Deal with:  0x1F23eb80f0c16758E4A55D48097c343bD20Be56f 0xa8bbb3742f299b183190a9b079f1c0db8924145b, 0x9a9122Ef3C4B33cAe7902EDFCD5F5a486792Bc3A, 

Sufferer Contract:  0xc74b72bbf904bac9fac880303922fc76a69f0bb4

Assault Transaction: 0x1a7ee0a7efc70ed7429edef069a1dd001fbff378748d91f17ab1876dc6d10392

The Root Trigger: 

The basis trigger was the lack of precision loss in Htoken’s contract. 

The attacker took the benefit of lack of precision in calculating liquidity index throughout execution of  _handleFlashLoanRepayment 

Assault Course of:

First, the attacker took a FlashLoan of 2k WBTC. adopted by including that into the Pool contract’s reserve’s liquidity index 

The attacker was capable of change the liquidity index of hEthWBTC  from 1e27 to 7,560,000,001e27

The attacker enhance it’s revenue by borrowing belongings from totally different markets.

This resulted in hacker profiting by paying much less collateral of WBTC because of precision loss 

Stream of Funds: 

Right here is the fund circulate throughout and after the exploit. You’ll be able to see extra particulars right here.

Attacker’s Wallets: 

It’s price noting {that a} Generalized frontrunner 0x9a9122Ef3C4B33cAe7902EDFCD5F5a486792Bc3A was capable of frontrun the unique transaction by paying a bribe of 263ETH to one of many validatiors managed by Lido 

Here’s a snippet of the pockets deal with

After the Exploit

The Undertaking acknowledged the hack through their Twitter.

Incident Timelines

Oct-18-2023 11:48:59 AM +UTC  – The malicious transaction occurred 

Oct-18-2023 11:48:59 AM +UTC – The unique transaction was frontrunned.

How might they’ve prevented the Exploit?

It’s suggest to test all of the instances for precision loss

If doable, protocols are requested to give attention to complete invariant testing 

The Crucial Want for Web3 Safety

As a Web3 safety agency QuillAudits, we embrace the essence of decentralization by providing transparency, and we would like that spirit to shine via in our providers too.

Need extra Such Safety Blogs & Reviews?

Join with QuillAudits on :

Linkedin | Twitter | Web site | Publication | Discord | Telegram

Associate with QuillAudits :

254 Views



Source link

Tags: 835kDecodingexploitHopelends
Previous Post

British Museum to digitise collection as over two million objects are found to be undocumented

Next Post

Solana Price Prediction for Today, October 19 – SOL Technical Analysis

Related Posts

Insuretech Company bolttech Raises $147 Million at a $2.1 Billion Valuation
DeFi

Insuretech Company bolttech Raises $147 Million at a $2.1 Billion Valuation

June 7, 2025
Bridge to Plume – Fee Free for One Week
DeFi

Bridge to Plume – Fee Free for One Week

June 6, 2025
SNXweave Weekly Recap 184
DeFi

SNXweave Weekly Recap 184

June 5, 2025
FISPAN Locks in $30 Million in Series B Funding
DeFi

FISPAN Locks in $30 Million in Series B Funding

June 5, 2025
What Is Price Slippage in Crypto & How Can You Avoid It
DeFi

What Is Price Slippage in Crypto & How Can You Avoid It

June 6, 2025
KeyBank Taps Personetics to Give Customers Insights into Spending
DeFi

KeyBank Taps Personetics to Give Customers Insights into Spending

June 3, 2025
Next Post
Solana Price Prediction for Today, October 19 – SOL Technical Analysis

Solana Price Prediction for Today, October 19 – SOL Technical Analysis

Why Bitcoin’s Previous Lows Won’t Repeat, According To Respected Analyst

Why Bitcoin's Previous Lows Won't Repeat, According To Respected Analyst

Make Music Count embeds watsonx to make perfect music with math  

Make Music Count embeds watsonx to make perfect music with math  

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Twitter Instagram LinkedIn RSS Telegram
Coins League

Find the latest Bitcoin, Ethereum, blockchain, crypto, Business, Fintech News, interviews, and price analysis at Coins League

CATEGORIES

  • Altcoin
  • Analysis
  • Bitcoin
  • Blockchain
  • Crypto Exchanges
  • Crypto Updates
  • DeFi
  • Ethereum
  • Metaverse
  • NFT
  • Regulations
  • Scam Alert
  • Uncategorized
  • Web3

SITEMAP

  • Disclaimer
  • Privacy Policy
  • DMCA
  • Cookie Privacy Policy
  • Terms and Conditions
  • Contact us

Copyright © 2023 Coins League.
Coins League is not responsible for the content of external sites.

No Result
View All Result
  • Home
  • Bitcoin
  • Crypto Updates
    • Crypto Updates
    • Altcoin
    • Ethereum
    • Crypto Exchanges
  • Blockchain
  • NFT
  • DeFi
  • Metaverse
  • Web3
  • Scam Alert
  • Regulations
  • Analysis

Copyright © 2023 Coins League.
Coins League is not responsible for the content of external sites.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In