Reserved IP Address°C
04-29-2025
BSV
$39.49
Vol 47.94m
-2.47%
BTC
$94977
Vol 30086.66m
0.27%
BCH
$373.49
Vol 292.8m
6.22%
LTC
$86.26
Vol 340.94m
-1.11%
DOGE
$0.17
Vol 1273.75m
-1.11%
Getting your Trinity Audio player ready...

French police have arrested suspects alleged to have stolen over $8 million from the decentralized finance (DeFi) platform Platypus Finance.

The hackers attacked Platypus on February 17, exploiting a flaw in a key pricing mechanism of the DeFi platform. They took off with $8.5 million in the first attack, $380,000 in the second, and $287,000 in the third. Inadvertently, the hacker sent the proceeds of the second attack to Aave, a lending protocol.

The two hackers have now been arrested in France, authorities confirmed.

Following the attack, the price of USP, the Platypus network’s “over-collateralized” stablecoin, depegged, shedding half its value in hours. At press time, USP is trading at 32 cents.

The attack on Platypus was based on an exploitation of a flaw in the platform’s USP solvency check mechanism. The hackers tricked the platform’s smart contracts to indicate that their USP was fully collateralized.

As blockchain analysis revealed, the hackers relied on a flash loan to execute the attack. This is a loan advanced without collateral that must be paid within the same transaction. While they aren’t inherently bad, they have been exploited by several hackers to manipulate prices on DeFi platforms and steal millions of dollars.

In the Platypus case, the attackers borrowed $44 million in a flash loan from Aave. They then supplied liquidity to one of the Platypus liquidity pools, minted 41 million USP, and initiated an emergency withdrawal of $44 million. The Platypus smart contracts could not detect the error and retract the 41 million USP. The hackers then exchanged the USP for $8.5 million in USDC, DAI, USDT, and Binance USD.

Since the hack, Platypus has recovered $2.4 million worth of USDC. Tether also froze $1.5 million of the stolen USDT. Some assets were unrecoverable as they were channeled through Tornado Cash, the infamous Ethereum-based digital assets mixer.

Blockchain sleuths were able to track the stolen assets and pinned down the hacker.

Watch: Law & Order Regulatory Compliance for Blockchain & Digital Assets

Recommended for you

The hidden problem behind Ethereum’s endless upgrades
Ethereum has a long history of upgrades, and while some of them were positive and neutral, the network remains unscalable.
April 29, 2025
Proof of Work or Proof of Value: Why mining must serve commerce
Proof of work is meaningless without proof of value. Mining must serve commerce, fueling transactions, not just dreams of high...
April 29, 2025
Advertisement
Advertisement
Advertisement