DeFi

Security

SpookySwap

Thala

DeFi lending platform Polter Finance is working to recover $12 million lost in a flash loan attack exploiting a faulty oracle on its new SpookySwap market. 
According to its latest update, Polter Finance is <a href="https://x.com/polterfinance/status/1858374281417404619" target="_blank" rel="nofollow">collaborating</a> with the <a href="https://crypto.news/ethical-hacker-security-alliance-crypto-projects/" target="_blank">Security Alliance</a>, a group of white hat hackers and security experts focused on combating cyber threats in crypto, to identify the attacker and expedite fund recovery. 
Among other efforts, the DeFi protocol has <a href="https://x.com/polterfinance/status/1858158065264324769" target="_blank" rel="nofollow">contacted</a> the exploiter via an on-chain message and offered to negotiate a bounty and not pursue legal action if the attacker returns the stolen funds. 
Meanwhile, Polter Finance’s pseudonymous founder, Whichghost, <a href="https://x.com/whichghost/status/1858134916632080648" target="_blank" rel="nofollow">filed</a> a police report in <a href="https://crypto.news/okx-launches-zero-fee-singapore-dollar-transfers-via-paynow-fast/" target="_blank">Singapore</a>, stating that the protocol lost over 16.1 million Singapore dollars (approximately $11.98 million) in the attack. 
Whichghost also reported personal losses exceeding $223,000 in the incident. 
According to Web3 security firm <a href="https://x.com/TenArmorAlert/status/1858045212519735481" target="_blank" rel="nofollow">TenArmor</a>, the incident was “another case of price oracle exploitation,” where attackers manipulate the data feeds—known as <a href="https://crypto.news/yei-finance-integrates-oev-network-to-recapture-oracle-extractable-value/" target="_blank">oracles</a>—that DeFi platforms use to determine asset prices. 
In this case, the attacker exploited Polter Finance’s reliance on the spot price of the BOO token on SpookySwap, as <a href="https://x.com/Phalcon_xyz/status/1858436357674381516" target="_blank" rel="nofollow">analyzed</a> by blockchain security firm BlockSec Phalcon.&nbsp; 
 You might also like: <a rel="" href="https://crypto.news/thala-protocol-resumes-operations-after-25-5m-exploit/"> Thala protocol resumes operations after $25.5m exploit </a> 
Using a <a href="https://crypto.news/radiant-capital-reports-4-5m-flash-loan-attack/" target="_blank">flash loan</a> to drain BOO token reserves from the WFTM-BOO liquidity pair, they artificially inflated the token’s price, enabling them to borrow far more than the collateral’s actual value. 
When writing, Polter has yet to issue an official post-mortem report confirming the nature of the attack, but the protocol has <a href="https://x.com/polterfinance/status/1857971122043551898" target="_blank" rel="nofollow">traced</a> the stolen funds to wallets on the crypto exchange Binance. 
POLTER, the platform’s native token, has plummeted by over 85% following the exploit. Meanwhile, <a href="https://defillama.com/protocol/polter-finance" target="_blank" rel="nofollow">data</a> from DefiLlama reveals the total value locked in the protocol has plunged from $9.77 million on Nov. 16 to just $61,603 at press time. 
November has been rife with DeFi vulnerabilities, and this marks the third significant exploit this month. As <a href="https://crypto.news/thala-protocol-resumes-operations-after-25-5m-exploit/" target="_blank">reported</a> by crypto.news, Aptos-based Thala protocol lost over $25 million worth of assets from its liquidity pools due to vulnerability in its farming contracts. However, the project managed to recover almost all of the funds after the attacker agreed to a $300,000 bounty. 
Prior to that, on Nov. 11, DeltaPrime, another lending and borrowing protocol, lost $4.8 million worth of digital assets. Like Polter Finance, the protocol <a href="https://crypto.news/deltaprime-sets-deadline-for-attacker-to-resolve-4-8m-hack/" target="_blank">sent</a> an on-chain message to the hacker to negotiate the return of all stolen assets. 
 Read more: <a rel="" href="https://crypto.news/tapioca-foundation-offers-1m-bounty-to-attacker-after-4-7m-exploit/"> Tapioca Foundation offers $1m bounty to attacker after $4.7m exploit </a>

Polter Finance kicks off recovery efforts following $12m flash loan attack

crypto.news

Other articles published on Nov 18, 2024

Centralized exchanges face a hard blow amid cooling liquidations

This $0.0008 Token Could Turn $50 Into $20,000 in 2025 – Don’t Miss Out on the Next 500x Opportun...

Dogecoin eyes $1, Pepe aims for ATH, as Yeti Ouro shares insight into making of Yeti Go

MicroStrategy’s Bitcoin Holdings Reach $24B with Latest Acquisition

SMCI Rallies as Firm Expected to Share Delisting Plan on Deadline Day

MicroStrategy Boost Bitcoin Holdings With 51,708 BTC Buyup

Join our free newsletter for daily crypto updates!