Compound

2024

DeFi

Foundation

Decentralized finance (DeFi) protocol Blueberry has managed to pause its protocol after a mad dash to limit potential damage from an “ongoing exploit” on Friday.&nbsp;
In a Feb. 23 <a href="https://twitter.com/blueberryFDN/status/1760859333288702412" target="_blank" rel="noopener nofollow">post</a> on X, the Blueberry Protocol Foundation reported that it was suffering an “ongoing exploit” and advised users to withdraw their funds from Blueberry lending markets as it worked on “pausing the protocol as quickly as possible.”
Adding to the chaos, users reported having issues withdrawing, with Blueberry noting that the front end was also down.
<blockquote data-ct-non-breakable="true">
 “The front end is also down, so if you are able to interact directly with the contracts to withdraw, please do.”
</blockquote>
The website and app went offline briefly with the following application error: “A client-side exception has occurred.”
Around 30 minutes later, Blueberry confirmed it had been able to pause the protocol, while the website appears to be back up and running.
<blockquote data-ct-non-breakable="true">
 “Funds currently deposited are no longer exploitable and we will update as we have more information.”
</blockquote>
<blockquote class="twitter-tweet">
 UPDATE: The protocol has been paused. Funds currently deposited are no longer exploitable and we will update as we have more information <a href="https://t.co/otsa1WZMEj">https://t.co/otsa1WZMEj</a>— Blueberry Protocol Foundation (@blueberryFDN) <a href="https://twitter.com/blueberryFDN/status/1760865357236211964?ref_src=twsrc%5Etfw">February 23, 2024</a>
</blockquote> 
Another update was later added by Blueberry, stating that all of the drained funds have been front-run by c0ffeebabe.eth and are now safe in the Blueberry multisig.
<blockquote data-ct-non-breakable="true">
 “The team is in contact with security and comms professionals and will attempt to contact the validator to return the remaining 91 ETH.”
</blockquote>
A total of 457 Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>) was initially drained, but 366 ETH was rescued by the so-called white hat and returned to the multisignature wallet. The protocol team reiterated:&nbsp;
<blockquote data-ct-non-breakable="true">
 “Deposited funds are currently safe. Only three markets were affected and the large majority was already returned. Total validator payment (loss) is 91 ETH. We are getting in touch and aim for a full repayment to users as the goal. Protocol is paused.”
</blockquote>
<blockquote class="twitter-tweet">
 To quickly reiterate: Deposited funds are currently safe. Only three markets were affected and the large majority was already returned. Total validator payment (loss) is 91 ETH. We are getting in touch and aim for a full repayment to users as the goal. Protocol is paused. <a href="https://t.co/uaQKwS9Iik">https://t.co/uaQKwS9Iik</a>— Blueberry Protocol Foundation (@blueberryFDN) <a href="https://twitter.com/blueberryFDN/status/1760876257078899016?ref_src=twsrc%5Etfw">February 23, 2024</a>
</blockquote> 
Related: <a href="https://cointelegraph.com/news/white-hat-returns-5-million-curve-finance-hack">Ethical hacker retrieves $5.4M for Curve Finance amid exploit</a>
Blueberry protocol is a decentralized lending market that enables lending and leveraged borrowing up to 20x of the collateral value.
According to <a href="https://defillama.com/protocol/blueberry-lend" target="_blank" rel="noopener nofollow">DefiLlama</a>, it had a total value locked (TVL) of $4.5 million and was forked from the Compound DeFi protocol. The TVL had fallen to $3.15 million after the exploit attempt.&nbsp;
C0ffeebabe shot to fame when she took around 2,879 ETH, worth around $5.4 million, from an exploiter and returned it to the DeFi protocol Curve Finance amid its hack in July 2023.
Ironically, Blueberry <a href="https://medium.com/@blueberryprotocol/blueberrys-security-overview-63393c2fde13" target="_blank" rel="noopener nofollow">posted</a> a “security overview” on Feb. 22 claiming that it “starts with a security-first approach to development and risk mitigation to prevent any internal risk brought on by protocol activity.”
It also claims to have been audited by Hacken and Sherlock and claims to have carried out two independent token security audits; however, the tweet promoting the “security review” has disappeared from Blueberry’s X feed.&nbsp;
<a href="https://cointelegraph.com/magazine/ethics-101-crypto-projects-negotiate-hackers/">Should crypto projects ever negotiate with hackers? Probably</a>

DeFi protocol Blueberry pauses lending following mystery exploit

Cointelegraph

Other articles published on Feb 23, 2024

LockBit countdown disappoints viewers with vague hints and a cartoon cat

What is Raydium Coin?

Kraken Seeks to Dismiss SEC Lawsuit: Details

Ethereum Price At Make-or-Break Levels, Can ETH Surge To $3,200?

Bitcoin miners challenge US government over data disclosure demands

JUST IN! There is a Problem in the Avalanche (AVAX) Network!

Join our free newsletter for daily crypto updates!