almost five confiscated by the police $1 billion – Bits Media

almost five confiscated by the police, capable of leading to the theft of assets worth $1 billion.

The vulnerability was first discovered last week, when hackers used it to bring cryptocurrencies to $2 million. Dedaub published a statement on its blog that, that assets worth 500 times more. Moreover, As it turned out, there were two vulnerabilities. One of them was in the WETH liquidity pool, and the other is in the router smart contract. This is a subsystem, распределяющая токены по сетям.

«Угроза была значительной. Ее можно назвать максимально возможной для одного протокола. If the vulnerability was fully exploited, a billion dollars' worth of assets would be at risk.. This would be one of the largest hacks in history.", - write representatives of Dedaub.

According to computer security experts, hackers could get $431 million in WETH tokens with just one transaction. These funds were stored in only three wallets, including AnySwap Fantom Bridge address, where there was $367 million. Hackers could also withdraw funds from 5,000 user wallets, who have not revoked permission to interact with funds. More $40 million, attackers could withdraw from liquidity pools for other networks, they say in Dedaub.

But the main loophole for attackers was in the AnySwap Fantom Bridge. In addition to the theft of stored at the address $367 million, хакеры могли бы бесконечно удваивать свои средства ― вкладывать токены в сети Эфириума, получать их в сети Fantom, а затем забирать токены из пула в сети Эфириума. At the same time, assets in the Fantom network would remain legitimate and valuable.

Wallets, who have not revoked permissions for Multichain smart contracts, remain vulnerable to hackers. The attackers were able to withdraw 1,150 ETH ($2.8 million), but then they returned it 320 ETH ($780 000). In this way, losses amounted to more $2 million. Previously reported, that hackers took assets to $1.34 million.