{"id":16670,"date":"2022-05-13T16:40:07","date_gmt":"2022-05-13T16:40:07","guid":{"rendered":"http:\/\/egrowonline.com\/?p=16670"},"modified":"2022-05-13T16:40:07","modified_gmt":"2022-05-13T16:40:07","slug":"collapse-of-luna-cryptocurrency-leads-to-11-million-exploit-on-venus-protocol","status":"publish","type":"post","link":"http:\/\/egrowonline.com\/?p=16670","title":{"rendered":"Collapse of Luna cryptocurrency leads to $11 million exploit on Venus Protocol"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p>Venus Protocol, a decentralized money market, announced on Thursday evening that about $11 million had been lost due to people exploiting the <a target=\"_blank\" href=\"https:\/\/www.nytimes.com\/2022\/05\/12\/business\/dealbook\/terra-crypto-stablecoin.html\" rel=\"noreferrer noopener\">historic collapse<\/a> of the Luna cryptocurrency and its sister stablecoin UST.<\/p>\n<p>The team behind the Venus Protocol <a target=\"_blank\" href=\"https:\/\/blog.venus.io\/venus-protocol-official-statement-regarding-luna-6eb45c3cb058\" rel=\"noreferrer noopener\">released a statement<\/a> confirming suspicions that had been <a target=\"_blank\" href=\"https:\/\/twitter.com\/bainonchain\/status\/1524888795748917251\" rel=\"noreferrer noopener\">floating around for hours<\/a> about the potential mishandling of the fiasco around Luna.\u00a0<\/p>\n<p>\u201cToday, we became aware of errant price behavior for LUNA on Venus Protocol. Upon investigation, it was learned that the price feed had been paused by Chainlink due to extreme market conditions,\u201d Venus Protocol explained.\u00a0<\/p>\n<p>\u201cThe price on Venus was last listed at about $0.107 while the market price was $0.01. In order to de-risk this situation, the protocol was paused using PauseGuardian via multisig. Upon this desyncing event, it was discovered that 2 accounts had suspiciously deposited a sum of 230,000,000 LUNA valued at over $24,000,000. Assets were borrowed totalling around $13,500,000.\u201d<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\" \/>\n<p>Venus Protocol and <a target=\"_blank\" href=\"https:\/\/t.co\/cJwLcCmUty\" rel=\"noreferrer noopener\">several other platforms<\/a> use Chainlink to provide its users with real-time price estimations of the tokens on its platform that are available for lending and borrowing. <\/p>\n<p>But the tool began having issues with Luna on Thursday as the price continued to fall precipitously.\u00a0<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">why does chainlink price oracle have min price setting? luna dropped below $0.1 but the chainlink oracle&#8217;s min price is $0.1&#x1f921; <a target=\"_blank\" href=\"https:\/\/t.co\/kplZ66Ei54\" rel=\"noopener\">https:\/\/t.co\/kplZ66Ei54<\/a><\/p>\n<p>\u2014 Zoeyuuu (@zzzzoey_t) <a target=\"_blank\" href=\"https:\/\/twitter.com\/zzzzoey_t\/status\/1524815733007364109?ref_src=twsrc%5Etfw\" rel=\"noopener\">May 12, 2022<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>\u201cAs a result, it was possible to deposit UST and LUNA as collateral and borrow other tokens, with an underpriced collateral valuation. Liquidable accounts also depend on the Chainlink oracles,\u201d decentralized finance researcher Vali Dyor <a target=\"_blank\" href=\"https:\/\/twitter.com\/Buythedipescu\/status\/1524805832835317762\" rel=\"noreferrer noopener\">explained<\/a>.\u00a0<\/p>\n<p>Chainlink released its own statement on the issues with its oracles, saying that the minimum value circuit breaker for the LUNA\/USD Price Feeds was automatically triggered due to the \u201cunprecedented volatility across the cryptocurrency markets.\u201d<\/p>\n<p>They explained that the circuit breaker is one component of their security efforts that is used to \u201cprotect against flash crashes and other forms of market manipulation.\u201d <\/p>\n<p>The attack on Venus Protocol was the reverse of a popular hack used to attack decentralized finance platforms. <\/p>\n<p>Flash loan attacks \u2014 which involve hackers borrowing funds that do not require collateral, buying a significant amount of a cryptocurrency to artificially raise its price and then offloading the coins before the loan is paid back and the borrower keeps any profit \u2014 <a target=\"_blank\" href=\"https:\/\/therecord.media\/hackers-steal-130-million-from-cream-finance-the-companys-3rd-hack-this-year\/\" rel=\"noreferrer noopener\">have been<\/a> <a target=\"_blank\" href=\"https:\/\/therecord.media\/more-than-13-million-stolen-from-defi-platform-deus-finance\/\" rel=\"noreferrer noopener\">used to attack<\/a> <a target=\"_blank\" href=\"https:\/\/therecord.media\/hackers-steal-more-than-11-million-from-elephant-money-defi-platform\/\" rel=\"noreferrer noopener\">several platforms<\/a> in recent months. \u00a0<\/p>\n<p>But Chainlink noted that the triggering of the circuit breaker was not a \u201ca manual intervention by node operators, Chainlink Labs, or other third parties.\u201d<\/p>\n<p>\u201cSome users proactively paused their applications, while other users were informed of the impacted feeds and reminded to immediately pause their application\u2019s use of the feeds in accordance with best practices outlined in the Chainlink documentation,\u201d Chainlink said. <\/p>\n<p>\u201cThe LUNA\/USD Price Feeds are now operational, but not recommended based on the asset\u2019s risk profile. We will be learning from this set of market events to continually improve the protocol\u2019s approach to circuit breaker parameters and other layers of security across various oracle networks.\u201d<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\" \/>\n<p>Venus Protocol has decided to suspend the LUNA market effective immediately at the request of its users and has a \u201cRisk Fund\u201d that will be used to cover the shortfall caused.\u00a0<\/p>\n<p>All wallets that have a position with Luna will be disabled temporarily as they disable the market.\u00a0<\/p>\n<p>\u201cSubsequently, a VIP will be prepared asking the community to set the collateral factor for LUNA to 0, after which the Chainlink price feed will be re-enabled which will allow withdrawals and liquidations. Venus is also assessing the UST Situation carefully and will take further actions as necessary,\u201d they explained.\u00a0<\/p>\n<p>Early on Friday morning, the protocol announced that it was \u201cpausing\u201d for 48 hours and that no liquidations would be allowed.\u00a0<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">&#x2139;&#xfe0f; Venus will unpause in 48 hours (per the time lock). <\/p>\n<p>&#x23f8; All liquidity is still contained within the protocol and no liquidations will take place during this period. <\/p>\n<p>&#x1f4f0; We will continue to provide updates until Venus is unpaused.<\/p>\n<p>\u2014 Venus Protocol (@VenusProtocol) <a target=\"_blank\" href=\"https:\/\/twitter.com\/VenusProtocol\/status\/1524970792823537664?ref_src=twsrc%5Etfw\" rel=\"noopener\">May 13, 2022<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>As the price of Luna <a target=\"_blank\" href=\"https:\/\/www.cnbc.com\/2022\/05\/12\/cryptocurrency-luna-now-almost-worthless-after-ust-falls-below-peg.html\" rel=\"noreferrer noopener\">cratered overnight<\/a>, exchanges and markets were forced to make difficult choices on how to approach the cryptocurrency.\u00a0<\/p>\n<p>Binance <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2022\/05\/12\/binance-halts-luna-and-ust-trading-across-most-of-its-spot-pairs-following-meltdown\/\" rel=\"noreferrer noopener\">stopped all trading of Luna and UST<\/a> on its platform but the moves have done little to stop all cryptocurrency values from being depressed across the board.<\/p>\n<div class=\"bottom-author\">\n<div class=\"row align-items-center\">\n<div class=\"col-lg-10 col-12\">\n<div class=\"author-informations\">\n<p class=\"author-description\"> Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p>        !function(f,b,e,v,n,t,s)<br \/>\n        {if(f.fbq)return;n=f.fbq=function(){n.callMethod?<br \/>\n            n.callMethod.apply(n,arguments):n.queue.push(arguments)};<br \/>\n            if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version=&#8217;2.0&#8242;;<br \/>\n            n.queue=[];t=b.createElement(e);t.async=!0;<br \/>\n            t.src=v;s=b.getElementsByTagName(e)[0];<br \/>\n            s.parentNode.insertBefore(t,s)}(window, document,&#8217;script&#8217;,<br \/>\n            &#8216;https:\/\/connect.facebook.net\/en_US\/fbevents.js&#8217;);<br \/>\n        fbq(&#8216;init&#8217;, &#8216;781647205981775&#8217;);<br \/>\n        fbq(&#8216;track&#8217;, &#8216;PageView&#8217;);<\/p>\n<p><br \/>\n<br \/><a href=\"https:\/\/therecord.media\/collapse-of-luna-cryptocurrency-leads-to-11-million-exploit-on-venus-protocol\/\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Venus Protocol, a decentralized money market, announced on Thursday evening that about $11 million had been lost due to people exploiting the historic collapse of the Luna cryptocurrency and its sister stablecoin UST. The team behind the Venus Protocol released a statement confirming suspicions that had been floating around for hours about the potential mishandling [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":16671,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[36],"tags":[819,52,1802,674,357,545,1233,2111],"class_list":["post-16670","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-collapse","tag-cryptocurrency","tag-exploit","tag-leads","tag-luna","tag-million","tag-protocol","tag-venus"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"http:\/\/egrowonline.com\/wp-content\/uploads\/2022\/05\/MOSHED-2022-5-13-2-41-20.jpg","_links":{"self":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/16670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16670"}],"version-history":[{"count":1,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/16670\/revisions"}],"predecessor-version":[{"id":16672,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/16670\/revisions\/16672"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/media\/16671"}],"wp:attachment":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16670"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16670"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}