Raydium is attacked, loses $2M

Solana-based decentralized finance protocol Raydium has suffered an exploit, in accordance with a press release from the developer. An preliminary investigation by the group revealed that the attacker took over the change’s proprietor account. The group stated that “authority” over the automated market maker and farm applications has been paused “for now.”

An exploit on Raydium is being investigated that affected liquidity swimming pools. Particulars to observe as extra is thought

⁰Initial understanding is proprietor authority was overtaken by attacker, however authority has been halted on AMM & farm applications for now
Attacker accnthttps://t.co/ZnEgL1KSwz

— Raydium (@RaydiumProtocol) December 16, 2022

Related articles

Hector Swap: A revolutionary DeFi swap aggregator

2023-04-13

Fantom: Though DeFi-friendly measures show results, FTM remains in limbo

2023-04-11

Twitter consumer and researcher ZachXBT reported that the attacker has bridged $2 million to Ethereum “thus far.”

Then bridged to ETH (~$2m thus far)https://t.co/3OYxDThv7I

— ZachXBT (@zachxbt) December 16, 2022

Round 2 p.m. UTC on Dec. 16, a Raydium admin account posted almost 1,000 transactions to the Solana community.

Every transaction eliminated liquidity from Raydium with out depositing a corresponding LP token, successfully seizing possession of liquidity suppliers’ funds. Quite a lot of tokens have been taken within the exploit, together with US Greenback Coin (USDC), Wrapped SOL (wSOL), Raydium, and others.

The exploit seems to have first been found by the Prism dev group. They posted a warning at 2:01 that an attacker was draining liquidity from Raydium with out depositing and burning LP tokens. Prism warned its customers to withdraw their Prism and USDC tokens from the change instantly.

There appears to be a pockets is draining LP Swimming pools from Raydium liquidity swimming pools utilizing admin pockets as a signer with out having/burning LP tokens.

We withdrew protocol offered PRISM/USDC liquidity from Raydium

WITHDRAW YOUR PRISM/USDC LIQUIDITY FROM RAYDIUM

— PRISM (@prism_ag) December 16, 2022

40 minutes later, the Raydium group took to Twitter to substantiate that the change had been hacked.

In line with crypto auditing agency Ottersec, the attacker has drained funds by invoking the withdraw_pnl perform on the contract, which is utilized by the developer to withdraw charges. The agency didn’t say whether or not this perform can be utilized to withdraw all liquidity or solely a small proportion from the swimming pools.

Nansen Portfolio, a crypto analytics agency, has confirmed that the attacker drained over $2.2 million from the change.

The pockets draining LP Swimming pools from Raydium liquidity swimming pools has acquired over $2.2M now, together with $1.6M $SOL

Monitor right here: https://t.co/IQedsOstPE pic.twitter.com/OAQJgaq5Mc

— Nansen Portfolio (@nansenportfolio) December 16, 2022

On the time of writing, the Raydium group continues to be investigating the exploit and has not but introduced whether or not compensation will likely be provided to victims of the assault.

Admin account hacks have been a recurring drawback within the crypto house lately. On Dec. 2, Ankr protocol’s deployer key was stolen, and the attacker used it to take away $5 million price of BNB. Earlier within the 12 months, the Ronin community bridge was hacked by comparable means. On this case, the attacker ran off with over $600 million of crypto loot.

Ankr has since reimbursed victims, and Ronin developer Axie Infinity has pledged that it’s going to do the identical.