{"id":46229,"date":"2023-03-14T07:02:32","date_gmt":"2023-03-14T07:02:32","guid":{"rendered":"http:\/\/egrowonline.com\/?p=46229"},"modified":"2023-03-14T07:02:32","modified_gmt":"2023-03-14T07:02:32","slug":"euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer","status":"publish","type":"post","link":"http:\/\/egrowonline.com\/?p=46229","title":{"rendered":"Euler attack causes locked tokens, losses in 11 DeFi protocols, including Balancer"},"content":{"rendered":"<p> <br \/>\n<br \/><img decoding=\"async\" src=\"https:\/\/images.cointelegraph.com\/images\/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjMtMDMvOTg2MTJlZWEtNTYzNS00NzA1LTkxN2YtZWE1NTZkMzQ2ZWI1LmpwZw==.jpg\" \/><\/p>\n<div data-v-48054ca8=\"\">\n<p>Contagion from the <a target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/euler-finance-hacked-for-over-195m-in-a-flash-loan-attack\" rel=\"noopener\">March 13 flash loan attack against Euler<\/a> has spread far and wide, resulting in frozen or lost funds for 11 different decentralized finance (DeFi) protocols, according to reports from each of them on Twitter. Balancer, an Ethereum protocol with over $1 billion total value locked (TVL), is among the affected protocols.\u00a0Below is a rundown of the major exploits and what we know so far.<\/p>\n<h3>Balancer<\/h3>\n<p>Balancer reported on March 13 that the Euler Boosted USD (bb-e-USD) pool had been affected by the exploit. Approximately $11.9 million worth of tokens from this pool were sent to Euler during the exploit. The Balancer emergency subDAO reacted by pausing the pool and putting it into recovery mode. However, over 65% of the pool\u2019s TVL had already been lost by the time it was paused.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">At 10:00 UTC Balancer contributors became aware of an exploit on Euler. It was determined the best course of action was to pause and put into recovery mode bbeUSD (Euler Boosted USD) and all pools containing bbeUSD. This was executed by the emergency subDAO at 11:00 UTC.<\/p>\n<p>\u2014 Balancer (@Balancer) <a target=\"_blank\" href=\"https:\/\/twitter.com\/Balancer\/status\/1635296203343798275?ref_src=twsrc%5Etfw\" rel=\"noopener\">March 13, 2023<\/a><\/p><\/blockquote>\n<p>As a result of a bug in the app\u2019s user interface (UI), liquidity providers cannot retrieve the remaining funds left in the pool. However, a new UI will be offered \u201cin the near future\u201d that will allow the remaining funds to be withdrawn, Balancer said. No other pools have been affected, Balancer clarified.<\/p>\n<h3>Angle Protocol<\/h3>\n<p>Angle Protocol <a target=\"_blank\" href=\"https:\/\/anglemoney.notion.site\/Angle-Protocol-Q-A-Regarding-Euler-Exploit-03af18cbe5e84430b3341b145554492e\" rel=\"noopener nofollow\">released<\/a> a preliminary report on its exposure to the attack. It may have lost over $17 million worth of USD Coin (<a target=\"_blank\" href=\"https:\/\/cointelegraph.com\/usdc-price-index\" rel=\"noopener\">USDC<\/a>). This may have caused the agEUR stablecoin, which is pegged to the euro, to become undercollateralized. The team is still investigating and attempting to prepare a detailed balance sheet. All minting and redemption of agEUR is currently paused, but borrowers can still repay their debts to the protocol as normal, the team said.<\/p>\n<h3>Idle Finance<\/h3>\n<p>Idle Finance has <a target=\"_blank\" href=\"https:\/\/twitter.com\/idlefinance\/status\/1635357003978788866\" rel=\"noopener nofollow\">provided<\/a> a detailed list of its losses due to the Euler exploit. It seems to have lost around $5.9 million worth of tokens in total, based on March 13 Ether (<a target=\"_blank\" href=\"https:\/\/cointelegraph.com\/ethereum-price\" rel=\"noopener\">ETH<\/a>) and euro prices. The team has <a target=\"_blank\" href=\"https:\/\/twitter.com\/idlefinance\/status\/1635250220786171906\" rel=\"noopener nofollow\">paused<\/a> all Best Yield vaults and Yield Tranches related to Euler to prevent further losses.<\/p>\n<h3>Yearn Finance<\/h3>\n<p>Yearn.finance has over $423 million in TVL, according to DefiLlama. It reported indirect exposure to Euler, through Angle Protocol and Idle Finance. It has <a target=\"_blank\" href=\"https:\/\/twitter.com\/iearnfinance\/status\/1635312188712792065\" rel=\"noopener nofollow\">lost<\/a> approximately $1.38 million. However, the team said that any bad debt not covered by Idle and Angle would be covered by the Yearn Treasury.<\/p>\n<h3>Yield Protocol<\/h3>\n<p>Yield Protocol is another protocol affected by the exploit. Its &#8220;mainnet liquidity pools are built on Euler,&#8221; according to the team&#8217;s\u00a0<a target=\"_blank\" href=\"https:\/\/twitter.com\/yield\/status\/1635265757646032896\" rel=\"noopener nofollow\">announcement<\/a> regarding the attack. The company has disabled the mainnet app, paused borrowing, and is investigating the attack. Its mainnet liquidity pools appear to have been affected, with a possible loss of \u201cless than $1.5 million.\u201d<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">The Euler hack has affected our mainnet liquidity pools. Yield liquidity pools hold two assets: Euler eTokens and Yield fyTokens. We do not yet have accurate figures for the value of the eTokens held before the attack but believe the total value to be less than $1.5 million USD.<\/p>\n<p>\u2014 Yield Protocol (@yield) <a target=\"_blank\" href=\"https:\/\/twitter.com\/yield\/status\/1635339497067130881?ref_src=twsrc%5Etfw\" rel=\"noopener\">March 13, 2023<\/a><\/p><\/blockquote>\n<h3>InverseFinance<\/h3>\n<p>InverseFinance reported that it was hit as well, with its DOLA Fed for the DOLA-bb-e-USD on Balancer <a target=\"_blank\" href=\"https:\/\/twitter.com\/InverseFinance\/status\/1635280206171885572\" rel=\"noopener nofollow\">losing<\/a> over $860,000. The team said it is communicating with Balancer in an attempt to get these funds returned to depositors.<\/p>\n<p><em><strong>Related: <\/strong><a target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/euler-finance-hacked-for-over-195m-in-a-flash-loan-attack\" rel=\"noopener\"><strong>Euler Finance hacked for over $195M in a flash loan attack<\/strong><\/a><\/em><\/p>\n<h3>SwissBorg<\/h3>\n<p>SwissBorg <a target=\"_blank\" href=\"https:\/\/twitter.com\/swissborg\/status\/1635250132370477056\" rel=\"noopener nofollow\">reported<\/a> that \u201ca small portion of [its] Smart Yield Program was impacted\u201d by the exploit. However, \u201cthe extent of the damage is minimal thanks to our Risk Management Procedure.\u201d The team said that it would compensate all losses from its funds, and its users \u201cwill not suffer any loss from this event.\u201d <\/p>\n<p>In a Telegram conversation with Cointelegraph, SwissBorg founder Cyrus Fazel clarified that the protocol ranks yield strategies based on risk, time, and APY. Since Euler was rated Risk 2- Adventurous, SwissBorg users \u201chad a limited amount\u201d invested in Euler. This mitigated against losses to the protocol, he explained.<\/p>\n<h3>Other affected protocols<\/h3>\n<p>Opyn, Mean, Sense and Harvest also reported they might have been affected by the exploit, though none have provided details on how much has been lost. This brings the total number of affected protocols to 11, with $37.6 million in cumulative losses.\u00a0<\/p>\n<p>Euler Finance is a crypto borrowing and lending protocol that runs on Ethereum. It became popular thanks in part to its support for using liquid staking derivatives (LSDs) such as Coinbase Staked ETH (cbETH) or Lido Staked ETH (stETH) as collateral for loans. On March 8, Euler had over $311 million in crypto <a target=\"_blank\" href=\"https:\/\/defillama.com\/protocol\/euler\" rel=\"noopener nofollow\">locked<\/a> inside its smart contracts. Since the exploit, its TVL has fallen to $10.37 million.<\/p>\n<p><em>This story was corrected at 2.11 am UTC on March 14 to reflect that the flash loan attack occurred on March 13.<\/em><\/p>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/cointelegraph.com\/news\/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Contagion from the March 13 flash loan attack against Euler has spread far and wide, resulting in frozen or lost funds for 11 different decentralized finance (DeFi) protocols, according to reports from each of them on Twitter. Balancer, an Ethereum protocol with over $1 billion total value locked (TVL), is among the affected protocols.\u00a0Below is [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":46230,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[41],"tags":[628,14508,172,8805,368,5934,610,477,1277],"class_list":["post-46229","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ethereum","tag-attack","tag-balancer","tag-defi","tag-euler","tag-including","tag-locked","tag-losses","tag-protocols","tag-tokens"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"http:\/\/egrowonline.com\/wp-content\/uploads\/2023\/03\/98612eea-5635-4705-917f-ea556d346eb5.jpg","_links":{"self":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/46229","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=46229"}],"version-history":[{"count":1,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/46229\/revisions"}],"predecessor-version":[{"id":46231,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/46229\/revisions\/46231"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/media\/46230"}],"wp:attachment":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=46229"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=46229"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=46229"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}