{"id":29633,"date":"2022-09-20T21:42:56","date_gmt":"2022-09-20T21:42:56","guid":{"rendered":"http:\/\/egrowonline.com\/?p=29633"},"modified":"2022-09-20T21:42:56","modified_gmt":"2022-09-20T21:42:56","slug":"wintermute-defi-operations-hacked-for-160m","status":"publish","type":"post","link":"http:\/\/egrowonline.com\/?p=29633","title":{"rendered":"Wintermute DeFi Operations Hacked for $160M"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p>CEO Evgeny Gaevoy Says Firm Remains Solvent<\/p>\n<\/div>\n<div>\n<p>Crypto market maker Wintermute has lost $160M in a hack that targeted its DeFi operations early Tuesday.<\/p>\n<p>\u201cIf you have a [market maker] agreement with Wintermute, your funds are safe,\u201d CEO Evgeny Gaevoy <a target=\"_blank\" href=\"https:\/\/twitter.com\/EvgenyGaevoy\/status\/1572134273875951617?s=20&amp;amp;t=Ecj4cBoWX0gq5kvDwRD-tg\" rel=\"noreferrer noopener\">said<\/a> on Twitter. \u201cThere will be a disruption in our services today and potentially for [the] next few days and will get back to normal after.\u201d<\/p>\n<h4>Vanity Address<\/h4>\n<p>Mudit Gupta, Polygon\u2019s head of information security, said the attacker likely <a target=\"_blank\" href=\"https:\/\/mudit.blog\/wintermute-muted-in-crypto-winter\/\" rel=\"noreferrer noopener\">exploited a bug<\/a> in Profanity, a program that generates \u201cvanity\u201d wallet addresses.<\/p>\n<p>Like license plates on vehicles, crypto addresses are a randomized string of numbers and letters. With Profanity, however, users are able to generate addresses that appear less random and more legible to human eyes.<\/p>\n<h4>Profanity Bug<\/h4>\n<p>In Wintermute\u2019s case, it was using a Profanity-generated address that <a target=\"_blank\" href=\"https:\/\/twitter.com\/0xtuba\/status\/1572153573605281792?s=20&amp;amp;t=jnPMoRfo238DqKr__Z7wKw\" rel=\"noreferrer noopener\">started<\/a> with several zeroes. <\/p>\n<p>Anton Bukov, the co-founder of 1inch, the DeFi protocol that first detailed the bug, said such an address could be exploited <a target=\"_blank\" href=\"https:\/\/twitter.com\/k06a\/status\/1572190698559905792?s=20&amp;amp;t=UHHXv5PJOgI0XMuioB5tIA\" rel=\"noreferrer noopener\">within seconds<\/a> using \u201caverage home hardware.\u201d\u00a0<\/p>\n<p>Gaevoy said the address had been generated to <a target=\"_blank\" href=\"https:\/\/twitter.com\/EvgenyGaevoy\/status\/1572181989242937345?s=20&amp;amp;t=UHHXv5PJOgI0XMuioB5tIA\" rel=\"noreferrer noopener\">save<\/a> on Ethereum\u2019s notoriously high gas fees, though it was not clear how it would help in that regard.\u00a0<\/p>\n<p>Gaevoy and Wintermute representatives did not immediately respond to The Defiant\u2019s request for comment Tuesday.<\/p>\n<p>DEX aggregator 1inch <a target=\"_blank\" href=\"https:\/\/blog.1inch.io\/a-vulnerability-disclosed-in-profanity-an-ethereum-vanity-address-tool-68ed7455fc8c\" rel=\"noreferrer noopener\">detailed<\/a> the bug on Thursday, and Wintermute appears to have heeded its warning that Profanity users move their digital assets from vanity wallet addresses, according to Gupta.<\/p>\n<p>But Wintermute made a crucial mistake, Gupta added \u2013 it forgot to remove the vanity address as an administrator of the smart contract the hacker drained.<\/p>\n<p>According to crypto analytics firm Arkham Intelligence, the hack took place within a 45-minute window and is the <a target=\"_blank\" href=\"https:\/\/twitter.com\/ArkhamIntel\/status\/1572215003545243649?s=20&amp;amp;t=xInFvqKRrzvnwP9MQAwt9A\" rel=\"noreferrer noopener\">seventh-largest<\/a> in DeFi history.\u00a0<\/p>\n<h4>Firm Remains Solvent<\/h4>\n<p>Gaevoy <a target=\"_blank\" href=\"https:\/\/twitter.com\/EvgenyGaevoy\/status\/1572134277428703234\" rel=\"noreferrer noopener\">said<\/a> on Twitter that Wintermute remains solvent with more than $300M in remaining equity.<\/p>\n<p>\u201cIf you are a lender to Wintermute, again, we are solvent, but if you feel safer to recall the loan, we can absolutely do that,\u201d he <a target=\"_blank\" href=\"https:\/\/twitter.com\/EvgenyGaevoy\/status\/1572134287243350016\" rel=\"noreferrer noopener\">wrote<\/a>.<\/p>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/thedefiant.io\/wintermute-hacked-160m\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>CEO Evgeny Gaevoy Says Firm Remains Solvent Crypto market maker Wintermute has lost $160M in a hack that targeted its DeFi operations early Tuesday. \u201cIf you have a [market maker] agreement with Wintermute, your funds are safe,\u201d CEO Evgeny Gaevoy said on Twitter. \u201cThere will be a disruption in our services today and potentially for [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":29634,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[39],"tags":[3552,172,846,3915,11312],"class_list":["post-29633","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ico","tag-160m","tag-defi","tag-hacked","tag-operations","tag-wintermute"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"http:\/\/egrowonline.com\/wp-content\/uploads\/2022\/09\/Wintermute160MHack.jpg","_links":{"self":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/29633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=29633"}],"version-history":[{"count":1,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/29633\/revisions"}],"predecessor-version":[{"id":29635,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/29633\/revisions\/29635"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/media\/29634"}],"wp:attachment":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29633"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}