Fei Protocol and Saddle Finance become the latest victims of DeFi hacks

The two latest DeFi attacks on April 30 on the Fuse pool on Rari Capital of Fei Protocol and Saddle Finance caused a total loss of nearly $90 million.

At noon on April 30, security unit Peckshield said Saddle Financean AMM protocol on Ethereum, was hacked resulting in over $10 million in damages.

first/ @saddlefinance was exploited in a flurry of txs (https://t.co/jnFnZHMaO7 and https://t.co/RbpyXg7Sxw),
resulting in the protocol loss of >$10M.

— PeckShield Inc. (@peckshield) April 30, 2022

According to blockchain transaction analysis, the attacker flashed 15 million USDC, then conducted a chain of value manipulation transactions on Saddle Finance to gain 3,375 ETH, worth more than 10.2 million USD. Hackers tried to launder money through Tornado Cash but only stopped at a small level, while most of the money remained in the wallet.

Saddle Finance says the BlockSec white hat hacker group has recovered $3.8 million. Trading on Saddle Finance is currently suspended.

The team is investigating a possible exploit and is pausing pool withdrawals

— Saddle (@saddlefinance) April 30, 2022

White hat hackers @BlockSecTeam were able to secure $3.8m. The team is in contact with them to return the funds

— Saddle (@saddlefinance) April 30, 2022

Then, in the afternoon, the algorithmic stablecoin platform Fei Protocol announced their Fuse pool on Rari Capital has been hacked but the damage is unknown. However, hacker’s wallet currently has 27,974 ETH, worth nearly 80 million USD. Hackers have now started transferring funds to Tornado Cash for laundering.

Fei Protocol announced to suspend all borrowing activities to limit damage, and also awarded a $10 million reward for hackers to return all the money.

We are aware of an exploit on various Rari Fuse pools. We have identified the root cause and paused all borrowing to mitigate further damage.

To the exploiter, please accept a $10m bounty and no questions asked if you return the remaining user funds.

— Fei Protocol (@feiprotocol) April 30, 2022

Also on the afternoon of April 30, hackers attacked Parity in 2017 unexpectedly moved 9,000 ETH (worth 25 million USD) to Tornado Cash and carried out money laundering. The Parity attack then resulted in the loss of more than 153,000 ETH.

The 2017 Parity Multisig Exploit Hacker (0x18345118bd04c405B4D74941563a21B5a2bF06b7) is laundering money with @TornadoCash and has laundered over 9,000 ether worth over $25 million at the time of writing. @etherscan pic.twitter.com/r7immdQS7N

— MistTrack (@MistTrack_io) April 30, 2022

April also recorded two other serious DeFi attacks, including Beanstalk Farms ($182 million) and Deus Finance ($13.4 million).

Synthetic CHK

Maybe you are interested: