News

SlowMist Release A Brief Analysis Of The Attack On BonqDAO Protocol

Key Points:

  • As reported by SlowMist, 946,000 ALBT have been converted into 695 ETH, while 558,000 BEUR have been converted into 534,000 DAI.
  • 113 million WALBT have been burned on the Polygon chain and ALBT have been withdrawn from the ETH chain, with some of the ALBT being converted to ETH via 0x.
SlowMist’s security team published a summary of the attack on the BonqDAO project. The attacker exploited the oracle to quote the required collateral, which was the fundamental cause of the attack.

The attackers amassed a substantial amount of WALBT and BEUR tokens (113 million WALBT, 98.65 million BEUR). So far, 946,000 ALBT have been converted into 695 ETH, while 558,000 BEUR have been converted into 534,000 DAI. Hackers continue to convert ALBT to ETH, but no funds have been discovered to be transmitted to exchanges or other platforms.

Firstly, the BonqDAO platform’s oracle source is the TellorFlex self-feed price to Chainlink price ratio. One of TellorFlex’s key limitations is that price reporters must mortgage 10 TRB before reporting price updates. The updateStakeAmount function in TellorFlex can be used to periodically update the amount of TRB that the price reporter needs to mortgage based on the price of the collateral.

Secondly, because the TRB mortgage amount of the TellorFlex oracle contract was initially set to 10 and was not modified via the updateStakeAmount function, the attacker only has to mortgage 10 TRB to become a price reporter and change the price of WALBT tokens in the oracle by using the submitValue function.

Then, the attacker changed the price and used the Bonq contract’s createTrove method to make a trove for the attack contract. The trove contract’s primary job is to record the user’s collateral status, debt status, market borrowing, liquidation, and so on.

After which, the price of WALBT tokens was adjusted and raised immediately after the attacker completed a mortgage operation in the protocol and then called the borrow function to borrow, causing the protocol to mint a large quantity of BEUR tokens for the attacker.

In another assault transaction, the attacker employed the same strategy to change the price of WALBT and subsequently liquidated other market users with liabilities to gain a significant number of WALBT tokens.

According to SlowMist MistTrack analysis, 113 million WALBT have been burned on the Polygon chain and ALBT have been withdrawn from the ETH chain, with some of the ALBT being converted to ETH via 0x.

Some BEUR have been converted to USDC by the attacker via Uniswap and then cross-chained to the ETH chain and converted to DAI.

Coincu previously reported the BonqDAO encryption protocol and AllianceBlock suffered a loss of $88 million in an attack due to a vulnerability in the BonqDAO smart contract.

DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.

Join us to keep track of news: https://linktr.ee/coincu

Thana

Coincu News

Thana

I am a news editor at Coincu, where I produce daily editorial packages and manage the knowledge and review article sections. Before journalism, I earned a Bachelor's degree in Global Logistics and Supply Chain Management from Northampton University and studied news journalism at Press Association Training.

Recent Posts

Dogecoin Price Gets $5 Prediction, Shiba Inu To Rally 1,100%, And ETFSwap (ETFS) To Jump 135x

Here are the latest predictions for Dogecoin, Shiba Inu, and ETFswap.

2 hours ago

AVAX Hits $1B in DeFi, Cardano Expected to Surge—BlockDAG Leads with $110M Presale & 100% Bonus!

Discover BlockDAG's 100% bonus and $110M presale surge that’s sparking interest among crypto enthusiasts. Also,…

2 hours ago

Crypto Institutional Investors Move To ETFSwap (ETFS) Amid $500 Million Liquidity Injection Expectations

Discover why crypto investors are moving to ETFSwap (ETFS) as $500 million liquidity injection is…

5 hours ago

Buyers Rush to Maximise Gains with BlockDAG’s 100% Bonus Offer; Plus, ETH Holds Strong as Solana Challenges Rivals

Learn about BlockDAG's $110M presale achievement and the whopping 100% bonus offer, alongside Ethereum's growth…

7 hours ago

Thai Police Corruption Case Involving Officers and Extortion

Thai police corruption exposed as officers extort millions in USDT from a Chinese man under…

10 hours ago

SafePal Telegram Wallet Launches with Swiss Bank Accounts and CeDeFi

SafePal Telegram Wallet allows 950 million users to create compliant crypto-friendly Swiss bank accounts, integrating…

11 hours ago

This website uses cookies.