Key Points:
The attack exposed vulnerabilities in the BiSwap migration contract, allowing the attacker to manipulate assets and deceive users. However, BiSwap swiftly responded to the incident and resolved the Migrator contract vulnerability, ensuring the safety of user funds.
Security company Fairyproof conducted a brief analysis of the attack, revealing that the BiSwap migration contract lacked essential verifications. Firstly, the unverified migration allowed anyone to replace legitimate migration transactions. Secondly, the unverified parameters of the tokens and pairs enabled the attacker to forge token0, token1, and Pair, facilitating the attack.
The attacker employed a two-step process to carry out the exploit. Initially, they used real pairs and fake tokens to initiate the migration function, leaving users’ LP assets burned within the contract. By adding only two fake tokens, the attacker formed their LP pool, while the user’s assets remained trapped.
In the subsequent step, the attacker exploited the migration function again, this time using the real token0, token1, and the previously generated fake LP. They added the assets left within the contract during the first step as their LP. As a result, the user’s assets were replaced with fake LP assets, redirecting them to the attacker’s LP.
Fairyproof estimated that the attack inflicted approximately $710,251 in damages. However, BiSwap took immediate action upon discovering the vulnerability. The platform promptly detected and resolved the Migrator contract vulnerability, ensuring the safety of user funds.
BiSwap, in response to the incident, issued a statement urging users to refrain from accessing the contract. They assured users that their funds remained secure after the vulnerability had been addressed. By swiftly addressing the issue, BiSwap demonstrated its commitment to safeguarding user assets and maintaining the trust of its community.
The BiSwap LP migration pool attack highlights the importance of robust security measures within the DeFi space. While the incident resulted in significant losses, BiSwap’s quick response in resolving the vulnerability and protecting user funds is commendable. Moving forward, it is crucial for decentralized platforms to implement thorough security audits and verifications to prevent such attacks and maintain the integrity of the DeFi ecosystem.
DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.
Join us to keep track of news: https://linktr.ee/coincu
Chubbi
Coincu News
Cosmos Developer Interchain Foundation sold 3000 ETH from its ICO today, totaling 21,600 ETH sold…
George Town, Grand Cayman, 22nd November 2024, Chainwire
Inflation Warning by Vanguard highlights risks during Trump’s term, citing tariffs and tighter labor markets…
Clanker token trading volume hit $59.8M on Nov 21, accounting for 14.75% of PumpFun. Fee…
Bitcoin Spot ETF inflows hit $1.005B on Nov 21, led by BlackRock’s $608M and Fidelity’s…
Discover the success story of a New York tech entrepreneur who made $72M from a…
This website uses cookies.