BSV
$64.56
Vol 48.57m
-3.09%
BTC
$101327
Vol 56441.53m
0.15%
BCH
$532.63
Vol 372.4m
-1.03%
LTC
$118.24
Vol 863.31m
-4.56%
DOGE
$0.39
Vol 3694.46m
-1.78%
Getting your Trinity Audio player ready...

French police have arrested suspects alleged to have stolen over $8 million from the decentralized finance (DeFi) platform Platypus Finance.

The hackers attacked Platypus on February 17, exploiting a flaw in a key pricing mechanism of the DeFi platform. They took off with $8.5 million in the first attack, $380,000 in the second, and $287,000 in the third. Inadvertently, the hacker sent the proceeds of the second attack to Aave, a lending protocol.

The two hackers have now been arrested in France, authorities confirmed.

Following the attack, the price of USP, the Platypus network’s “over-collateralized” stablecoin, depegged, shedding half its value in hours. At press time, USP is trading at 32 cents.

The attack on Platypus was based on an exploitation of a flaw in the platform’s USP solvency check mechanism. The hackers tricked the platform’s smart contracts to indicate that their USP was fully collateralized.

As blockchain analysis revealed, the hackers relied on a flash loan to execute the attack. This is a loan advanced without collateral that must be paid within the same transaction. While they aren’t inherently bad, they have been exploited by several hackers to manipulate prices on DeFi platforms and steal millions of dollars.

In the Platypus case, the attackers borrowed $44 million in a flash loan from Aave. They then supplied liquidity to one of the Platypus liquidity pools, minted 41 million USP, and initiated an emergency withdrawal of $44 million. The Platypus smart contracts could not detect the error and retract the 41 million USP. The hackers then exchanged the USP for $8.5 million in USDC, DAI, USDT, and Binance USD.

Since the hack, Platypus has recovered $2.4 million worth of USDC. Tether also froze $1.5 million of the stolen USDT. Some assets were unrecoverable as they were channeled through Tornado Cash, the infamous Ethereum-based digital assets mixer.

Blockchain sleuths were able to track the stolen assets and pinned down the hacker.

Watch: Law & Order Regulatory Compliance for Blockchain & Digital Assets

Recommended for you

Organizations aren’t adopting blockchain? Study reveals why
The study by four U.K. professors found that while organizations would like to explore blockchain, it has a negative narrative...
December 13, 2024
Treasury ops to undergo reform; Web3 laptop coming in 2025
In its report, Citi projects sweeping changes for corporate treasuries by 2027, driven by emerging technologies. Elsewhere, the public will...
December 13, 2024
Advertisement
Advertisement
Advertisement