VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
▰ METHOD
Undisclosed
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
Avalanche-based lending protocol Nereus Finance has been the victim of a crafty hack that saw a user net $371,000 worth of USD Coin using a smart contract exploit. Blockchain cybersecurity firm CertiK was one of the first to detect the exploit on Tuesday, indicating that the attack impacted liquidity pools on Nereus relating to decentralized exchange (DEX) Trader Joe and automated market maker Curve Finance. Reported loss: $371,000.
Primary source
https://cointelegraph.com/news/avalanche-flash-loan-exploit-sees-371k-in-usdc-stolen ↗Sourced from
chainsec
Technical record
- chain
- avalanche
- protocol
- Nereus Finance
- bug_class
- unknown
- date_occurred
- 2022-09-06
- loss_usd
- $371,000
- source_id
- cs:nereus-finance::2022-09-06
Related — same bug class