Terra

USDC

Security

Cosmos

<p>The Terra blockchain faced a severe security exploit of approx. $6 million due to a vulnerability in the IBC hooks module, allowing an attacker to drain substantial assets. However, block production resumed at 4:19 AM UTC today after a critical emergency upgrade, with over 67% of validators updating their nodes.</p> 
<p>The exploit targeted bridged assets, including the USDC stablecoin and ASTRO tokens from Astroport Finance. Security firm Beosin <a href="https://x.com/BeosinAlert/status/1818548029416411279" target="_blank" rel="noreferrer noopener nofollow">estimates</a> that over $6 million in tokens were stolen, leading to a 60% drop in ASTRO’s value.&nbsp;</p> 
<div class="wp-block-image"> 
 <figure class="aligncenter">
  <img decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeiAgTGHIQXbEt0gZpihJhXebVHQclelLC7crmBv42UpLere15DRl9tGbrLZdOz2Q_PL2z7g-BWzVKoADfOBM5nohukMu004fSmyuEr9uWWx9tdD5Pg5xPG7gCPicxtu88F8g0JxLUQliHe8HCu98o-tQrz?key=niJao2hZg4exqdfmaobRgg" alt="AD 4nXeiAgTGHIQXbEt0gZpihJhXebVHQclelLC7crmBv42UpLere15DRl9tGbrLZdOz2Q PL2z7g BWzVKoADfOBM5nohukMu004fSmyuEr9uWWx9tdD5Pg5xPG7gCPicxtu88F8g0JxLUQliHe8HCu98o">
  <figcaption class="wp-element-caption">
   Image Source: Terra
  </figcaption>
 </figure>
</div> 
<p>This vulnerability had been previously patched across the broader Cosmos ecosystem in April 2024 but was overlooked in Terra’s June upgrade, leaving the network exposed.</p> 
<p>The breach <a href="https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx" target="_blank" rel="noreferrer noopener nofollow">allowed</a> attackers to execute malicious CosmWasm contracts through IBC interactions, resulting in the re-minting of assets. Specifically, attackers drained 3.5 million USDC, 500k USDT, 2.7 BTC, and 60 million ASTRO tokens.&nbsp;</p> 
<p>The compromised tokens were minted into the attacker’s wallet and transferred out before being “burnt” upon exit. This manipulation inflated the total value locked (TVL) figures on Terra, reflecting assets that no longer exist.</p> 
<div class="wp-block-image"> 
 <figure class="aligncenter">
  <img decoding="async" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdr6j-_iriTXHKvXqoo0DTcVnKA6hY7tJaraY6EeQamER4U1gp4Z2x8cOoHVAldc3rf9WE9hkM9lGhYNdSMCjKUHn1Hpd1nTAhH_K6TVb80MIFcMPrR1Z5ZBblzvu_vtnIxA5D8QA0G_F4Yfq9dWezZVrw?key=niJao2hZg4exqdfmaobRgg" alt="AD 4nXdr6j">
  <figcaption class="wp-element-caption">
   Image Source: CyversAlerts
  </figcaption>
 </figure>
</div> 
<p>Terra blockchain paused operations at block 11,430,400, halting all user transactions. The team, in collaboration with Terra (Phoenix-1) validators, implemented an emergency patch to address a suspected exploit during this downtime, according to their official X post.</p> 
<p>In response, Terra swiftly implemented emergency measures, coordinating with validators to apply an urgent patch to address the exploit. The incident underscores a critical need for robust security measures in blockchain infrastructure to prevent such vulnerabilities.</p> 
<p>As the digital asset world grapples with these revelations, the spotlight is on Terra to strengthen its security protocols and restore confidence in its network. This breach highlights the ongoing challenges in securing blockchain systems and the necessity for continuous vigilance and upgrades.</p> 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 <p>Also Read: <a href="https://www.cryptotimes.io/2024/07/31/indias-bwa-to-address-cyber-consumer-woes-post-wazirx-hack/" target="_blank" rel="noreferrer noopener">India’s BWA to Address Cyber, Consumer Woes Post-WazirX Hack</a></p> 
</blockquote>

Terra Resumes Block Production After $6M Security Breach

The Crypto Times

Other articles published on Jul 31, 2024

BTC to ETH. How to Convert Bitcoin to Ethereum Avoiding KYC?

Bitcoin slides below $66k: Here’s what whales are up to

SEC's Greenlight For Spot Ethereum ETFs Sends BONK, ETFSwap (ETFS), And Mines Of Dalarnia (DAR) S...

SBINFT Revamps Marketplace for Better NFT Trading Experience

Four Arrested in Kyiv for Alleged Kidnapping and Murder of Bitcoin Investor: Details

Kwenta and Perennial Kickstart Arbitrum Expansion with 1.9M ARB

Join our free newsletter for daily crypto updates!