WEB3
by BSC News
July 31, 2024
The exploit targeted a vulnerability in the IBC hooks module, which facilitates cross-chain contract calls and token movements.
The Terra blockchain has recently suffered a major security breach, leading to the unauthorized access and theft of millions of tokens.
The breach targeted a vulnerability within a third-party module known as IBC hooks, a critical component that facilitates cross-chain contract calls and token movements. This exploit allowed hackers to transfer assets, including USDC stablecoin and Astroport tokens, without authorization.
According to Cyvers Alerts, hackers have stolen 60 million ASTRO, 3.5 million USDC, 500,000 USDT, and 2.7 Bitcoin from the Terra blockchain. The total amount of reported losses has reached roughly $6.8 million.
🚨ALERT🚨@terra_money was exploited, resulting in the theft of approximately 60M $ASTRO, 3.5M $USDC, 500K $USDT, and 2.7 $BTC.
— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) July 31, 2024
The attacker took advantage of a reentrancy vulnerability in the timeout callback of ibc-hooks.
This vulnerability was revealed in April of this year.… https://t.co/56oTpg78Cv
The vulnerability in the network’s timeout callback of IBC hooks allowed attackers to execute transactions repetitively, resulting in significant losses and potentially minting extra tokens.
Cyvers Alerts noted that this vulnerability was revealed in April of this year. However, Terra's recent upgrade in June failed to include the critical patch that had been implemented across the broader Cosmos ecosystem. This oversight left the platform exposed and paved the way for the exploit.
In response to the breach, Terra halted the network to apply an emergency patch. This measure aimed to prevent further unauthorized transactions and secure the platform from additional theft. Terra has been coordinating closely with its validators to implement the patch and remediate the suspected exploit.
“We will be working with the validators on Terra to apply an emergency patch thereafter to remediate a suspected exploit,” Terra stated in their official announcement.
Disclaimer
Disclaimer: The views expressed in this article do not necessarily represent the views of BSCNews. The information provided in this article is for educational and informational purposes only and should not be construed as investment advice. BSCNews assumes no responsibility for any investment decisions made based on the information provided in this article
Related News
Latest News
September 7, 2024
Weekly Article Recap: 9/02-9/06
September 6, 2024
Aptos Welcomes Brevan Howard, BlackRock, and Hamilton Tokenized Funds by Libre
September 6, 2024
Magic Eden Launches New US Domain, Separates Services for US and International Users
September 6, 2024
Pavel Durov Criticizes French Authorities Over Telegram Charges, Hints at Market Withdrawals
September 6, 2024
Changpeng Zhao Permanently Barred from Binance Management But Retains Power: Binance CEO
September 5, 2024
What is SNAXchain by Synthetix?
September 5, 2024
Angel Drainer Resurfaces: New Phishing Toolkit AngelX Deploys 300+ Malicious dApps
September 5, 2024
Injective Launches World’s ‘First Ever’ Tokenized Index for BlackRock's BUIDL Fund
More News