Recent research by on-chain aggregator IntoTheBlock shows that the majority of exploits in the decentralized finance (DeFi) space are the result of unaudited projects. With this, the study concludes that while an audit may not guarantee safety, it should certainly be a minimum requirement for DeFi protocols.
The vast majority of DeFi exploits relate to unaudited projects. So while an audit may not guarantee safety, it should certainly be a minimum requirement for DeFi protocols.
— IntoTheBlock (@intotheblock) January 17, 2024
https://t.co/PnlLwP6D07 pic.twitter.com/shbB91FioN
Bungee Exchange, powered by the recently exploited SocketDotTech protocol, has assured users that it is safe to use with all operations restored.
Bungee is FULLY OPERATIONAL & SAFE TO USE.
— Bungee (@BungeeExchange) January 17, 2024
Earlier, the exchange had indicated that since it does not request infinite approvals by default, Bungee users should be largely unaffected. Nevertheless, it paused the affected contracts while resuming bridging on the network.
It comes barely 24 hours after SocketDotTech protocol was exploited, with at least $3.3 million believed to be stolen.
❗️@SocketDotTech / @BungeeExchange is currently under ongoing attack. The loss is about $3.3M!
— Hacken (@hackenclub) January 16, 2024
Check more details below... pic.twitter.com/8z0DibsJmR
Reportedly, 231 wallets were impacted with an average loss of $14,000 each.
SocketDotTech has issued an official statement following the exploit, indicating that the attack affected wallets with infinite approvals to Socket contracts.
In response, all affected contracts have been paused with the protocol committing to keep users informed.
Urgent
— Socket (@SocketDotTech) January 16, 2024
Socket has experienced a security incident which affected wallets with infinite approvals to Socket contracts.
We have identified the issue & have paused the affected contracts.
We’re working on the situation & will keep you informed with regular updates & next steps.
Among the stolen assets include Ethereum (ETH), Polygon (MATIC), Wrapped Bitcoin (WBTC), Wrapped Ether (WETH), and Dai (DAI).
Among the stolen assets pic.twitter.com/Uf52BBfjrr
— Hacken (@hackenclub) January 16, 2024
Blockchain security and data analytics firm PeckShield reported the incident first, calling SocketDotTech's attention to the incident.
Hi @SocketDotTech, you may want to take a look: https://t.co/EQGnWELlie
— PeckShield Inc. (@peckshield) January 16, 2024
According to PeckShield, the bad route exploited in the hack was added 3 days ago and is now disabled. The security firm attributes the attack to "...incomplete validation of user input, which is exploited to steal funds from users who have approved the vulnerable SocketGateway contractocketGateway contract."
The bad actor exploited the mainnet, with users being asked to revoke all addresses as a precaution.
This address has been highlighted as being involved in the attack, with users asked to revoke it as it shows up as Socket: Gateway on Etherscan.
SocketDotTech is an interoperability protocol bringing seamless connectivity across blockchains, while Bungee is a bridge aggregator powered by Socket and enables users to find the best route for bridging.
Bungee finds multiple bridging routes via supported decentralized exchanges (DEXes) and bridges, considering any swaps that may be needed before/after bridging.
Neither SocketDotTech nor Bungee Exchange immediately responded to FXStreet's request for comment.
Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.
If not otherwise explicitly mentioned in the body of the article, at the time of writing, the author has no position in any stock mentioned in this article and no business relationship with any company mentioned. The author has not received compensation for writing this article, other than from FXStreet.
FXStreet and the author do not provide personalized recommendations. The author makes no representations as to the accuracy, completeness, or suitability of this information. FXStreet and the author will not be liable for any errors, omissions or any losses, injuries or damages arising from this information and its display or use. Errors and omissions excepted.
The author and FXStreet are not registered investment advisors and nothing in this article is intended to be investment advice.
Recommended Content
Editors’ Picks
XRP struggles near $0.7440, could still sustain rally after Robinhood listing
Ripple's XRP is trading near $0.6900, down nearly 3% on Wednesday, as declining open interest could extend its price correction. However, other on-chain metrics point to a long-term bullish setup.
Dogecoin price forecast: Miners offload $240M as DOGE approaches risk zone
Since Donald Trump’s victory on November 5, Dogecoin has emerged as the best performing asset among the top 10 ranked cryptocurrencies. On November 12, DOGE reached a new milestone price propelled by Trump’s statement confirming Elon Musk’s involvement in the incoming administration.
Ethereum Price Forecast: ETH's declining supply could fuel bullish pressure toward $3,732
Ethereum is trading near $3,220, down 2.5% on Wednesday after its supply began trending downward. The declining supply could fuel bullish pressure for the top altcoin, especially as institutional demand for ETH ETFs is also rising.
PEPE hits new all-time high, rallies nearly 50% following Robinhood and Coinbase listing
PEPE rallied over 50% on Wednesday and hit a new all-time high after crypto exchanges Robinhood and Coinbase announced they would list the meme coin on their respective trading platforms.
Bitcoin: Further upside likely after hitting new all-time high
Bitcoin hit a fresh high of $76,849 on Thursday as crypto-friendly candidate Donald Trump won the US presidential election. Institutional demand returned with the highest single-day inflow on Thursday since the ETFs’ launch in January.
Best Forex Brokers with Low Spreads
VERIFIED Low spreads are crucial for reducing trading costs. Explore top Forex brokers offering competitive spreads and high leverage. Compare options for EUR/USD, GBP/USD, USD/JPY, and Gold.