BadgerDAO allegedly had a security hole and lost $ 10 million

The BadgerDAO decentralized financial protocol appears to have suffered a cyber attack that resulted in a loss of $ 10 million at the time of writing.

The attack, which became public on December 2 at around 2 a.m. UTC, targeted the protocol on the Ethereum network at the contract address 0x1fcdb04d0c5364fbd92c73ca8af9baa72c269107.

For your information, the nasty front end attack on Badger looks like rugby approval has taken ~ 10 million out of everyone’s wallet. If you’ve interacted with anything about Badger in the past few weeks, check it out and revoke it ASAP https://t.co/vJPMmBZ3af

– Spreek (@spreekaway) December 2, 2021

Users who have interacted with this contract must revoke permissions from their wallets.

To revoke the rights of a contract, go to etherscan.com and log in with a wallet that you believe is open. Although the hack was recent, the contract could have been approved weeks ago.

total unconfirmed The damage amounted to about $ 10.6 million.

The BadgerDAO team has not yet confirmed the dismantling, but has published it tweet at 4:30 a.m. UTC confirmed there were reports of problems. All smart contracts on BadgerDAO have been paused to prevent other potentially harmful withdrawals.

Badger has received reports of unauthorized user withdrawals.

When Badger engineers investigated this, all smart contracts were stopped to prevent further payouts.

Our investigation is ongoing and we will provide more information as soon as possible.

– adgerDAO (@BadgerDAO) December 2, 2021

Initial reports suggest that some users have received Unusual Issue requests from smart contracts for the log. It is believed that these requests are the attack that is being carried out through the front-end protocol.

Some adjusted the value of the alleged losses up to $ 100 million, with a user reported a loss of $ 90 million.

Related: Hackers can use a compromised Google Cloud account to install mining software in less than 30 seconds:

On Badger’s official Discord server, Tritium, a major contributor, wrote, “Looks like a number of users set up permissions on the mining address to make it work in their vault, and that helped.

BADGER is down 15% to $ 22.71 at the time Coingecko went to press.