Hackers Steal $3.2 Million Worth of Ethereum From Conic Finance DeFi Protocol

DeFi Ethereum
Ad Disclosure
Ad Disclosure

We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. However, this potential compensation never influences our analysis, opinions, or reviews. Our editorial content is created independently of our marketing partnerships, and our ratings are based solely on our established evaluation criteria. Read More
Last updated:
Ad Disclosure
Ad Disclosure

We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. However, this potential compensation never influences our analysis, opinions, or reviews. Our editorial content is created independently of our marketing partnerships, and our ratings are based solely on our established evaluation criteria. Read More
Author
Fredrik Vold
Author Categories
About Author

Last updated:
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
Ad DisclosureWe believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. Read more
Source: Pixabay

The decentralized finance (DeFi) protocol Conic Finance has lost more than $3.2 million worth of Ether (ETH) in two separate hacking incidents in recent days.

The first attack, which happened on Friday last week, was described by the Conic Finance team as a “re-entrancy attack” that exploited a vulnerability in Curve V2 pools, earning the attacker 1,700 ETH tokens.

“A fix to the affected contract is being deployed,” the team wrote.

The team went on to assure the community that the exploit “cannot be done again” for the same Omnipool, and said that “no other Conic Omnipools are affected by this issue.”

Second attack

A few hours later, however, the team again reported that they had suffered an exploit, this time draining approximately $300,000 worth of tokens from the crvUSD Omnipool.

“In response to this and given today’s ETH exploit, we immediately enforced maximum safety measures and temporarily shutdown all Omnipools,” a new tweet from Conic Finance said.

The team stressed that the second attack was “unrelated to the ETH Omnipool’s re-entrancy exploit.”

‘Extremely difficult’ two days

In a post-mortem update published after the two attacks, the Conic Finance team admitted that the past two days have been “extremely difficult.”

“We feel devastated by this situation and will do everything in our power to recover the stolen funds,” the team said.

The post-mortem update appeared to place part of the blame for both of the attacks on Curve, saying about the second incident that interaction with “imbalanced Curve pools” caused the vulnerability.

Curve is a decentralized exchange (DEX) for stablecoins that uses the automated market maker (AMM) model to manage liquidity.

“While we did have some mechanism in place to ensure we did not interact with imbalanced Curve pools, the bounds that we had set were not tight enough and allowed the attacker to slowly drain funds from the pool,” the team wrote.

Despite this, the update also said that Curve’s team members “deserve recognition for their massive help and support.”

Conic Finance is a relatively new DeFi project, and the protocol’s token, CNC, is for now only listed on MEXC and CoinEx in addition to a few decentralized exchanges.

As of press time on Monday, the CNC token was down by 45% over the past 7 days, data from CoinGecko showed.

CNC token price past 7 days. Source: CoinGecko

More Articles

Altcoin News
Gold-Backed Altcoins Boom as Major Banks Raise Price Predictions: Which Coins to Get
Arslan Butt
Arslan Butt
2025-02-09 12:55:24
Altcoin News
Coinbase Holds Over $420 Billion in Digital Assets for Users, Exceeding 21st Largest US Bank
Ruholamin Haqshanas
Ruholamin Haqshanas
2025-02-09 12:28:56
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors