Convergence

Source

DeFi

Security

<p>The post <a href="https://coinpedia.org/news/massive-hack-on-convergence-210000-stolen-in-minutes/">Massive Hack on Convergence: $210,000 Stolen in Minutes!</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>After millions of funds were lost in crypto in the month of July, the start of a new month brought a new hack to the crypto community. In a shocking event, decentralized finance protocol- Convergence got exploited out of $210,000. This has seriously rattled the crypto community.<br>Let’s explore how this attack happened and what impact it created.</p> 
<h2 class="wp-block-heading" id="h-the-exploit-uncovered"><strong>The Exploit Uncovered</strong></h2> 
<p>An unknown attacker found a big vulnerability in Convergence’s CvxRewardDistributor contract. The hacker minted 58 million $CVG tokens, then swapped them for 60 wrapped ether (WETH) and 15,900 crvFRAX stablecoins on Curve. At the time, CVG was trading at $0.1155. After the hack, it crashed to a shocking $0.000413. </p> 
<p>QuillAudits, a top web3 security firm, said blockchain data on Etherscan shows the hacker converted the stolen funds to ether (<a href="https://markets.coinpedia.org/ethereum/" target="_blank" rel="noreferrer noopener">ETH</a>) and sent them to Tornado Cash, which is used to hide transaction details.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Frens, <a href="https://twitter.com/Convergence_fi?ref_src=twsrc%5Etfw">@Convergence_fi</a> was just hit by an exploit resulting in a loss of around $210,000. <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"><br><br>The attacker minted 58 million <a href="https://twitter.com/search?q=%24CVG&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$CVG</a> tokens &amp; swapped them for 60 WETH &amp; 15.9k crvFRAX.<br><br>The price of <a href="https://twitter.com/search?q=%24CVG&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$CVG</a> at the time of exploit was $0.1155. It dumped 99% and is currently at $0.000413… <a href="https://t.co/43MJGjQg2i">pic.twitter.com/43MJGjQg2i</a></p>— QuillAudits 
   <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/27a1.png" alt="➡" class="wp-smiley" style="height: 1em; max-height: 1em;"> Web3 Security 
   <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f977.png" alt="🥷" class="wp-smiley" style="height: 1em; max-height: 1em;">
   <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6e1.png" alt="🛡" class="wp-smiley" style="height: 1em; max-height: 1em;"> (@quillaudits_ai) <a href="https://twitter.com/quillaudits_ai/status/1819049207061225601?ref_src=twsrc%5Etfw">August 1, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-financial-repercussions"><strong>Financial Repercussions</strong></h2> 
<p>The direct financial loss from the hack is about $210,000. But for CVG holders, it’s even worse. The token’s fully diluted value (FDV) was $17 million before the hack. That value disappeared almost instantly. The price of CVG just nosedived, causing panic among investors and shaking trust in the protocol.</p> 
<p>Convergence quickly took the situation on their hand and warned users on X, telling them not to interact with the protocol until further notice.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"> URGENT COMMUNICATION <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;"><br><br>Convergence has been hacked. Please don't interact with the protocol.</p>— Convergence (@Convergence_fi) <a href="https://twitter.com/Convergence_fi/status/1819032027842113959?ref_src=twsrc%5Etfw">August 1, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<h2 class="wp-block-heading" id="h-root-cause-and-security-implications"><strong>Root Cause and Security Implications</strong></h2> 
<p>The root cause was a vulnerability in the CvxRewardDistributor contract. This allowed the attacker to bypass input validation and mint tons of CVG tokens. This really shows why we need thorough smart contract audits and constant security checks in the DeFi space.</p> 
<p>QuillAudits has been crucial in figuring out the details of the exploit. They’re working hard to give the community constant insights and recommendations.</p> 
<h2 class="wp-block-heading" id="h-lessons-for-the-defi-community"><strong>Lessons for the DeFi Community</strong></h2> 
<p>This exploit is another reminder of the risks in decentralized finance protocols. Everyone needs to stay vigilant, keep up with security news and only use well audited projects. As DeFi keeps growing, the complexity and frequency of attacks grow too, making robust security practices super important for all of us.</p> 
<p>Also Check Out: <a href="https://coinpedia.org/news/solana-meme-coin-scam-hackers-steal-530k-from-sydney-sweeney-and-bob-odenkirks-twitter-accounts/" target="_blank" rel="noreferrer noopener">Convicted Hacker Linked to Sydney Sweeny &amp; Odenkirk Celebrity Crypto Hacks</a></p>

Massive Hack on Convergence: $210,000 Stolen in Minutes!

Table of Contents

CoinPedia News

Other articles published on Aug 1, 2024

DeFi is ‘waking up again’ — Active loans return to 2022 levels

Bitcoin ‘explosive move’ looms as Bollinger Bands reach tightest points

Quant Fund Kbit’s Insights on Crypto Investments: Understanding the Best Crypto Presale Projects ...

Hackers Wiped Out Over $265 Million in July 2024- PeckShield

Analysts Share Insights on Bitcoin and Solana-Based Memecoins

Bitcoin Hash Rate Surges to Record Levels: A Historic Milestone

Join our free newsletter for daily crypto updates!