DeFi

Clipper

Optimism

Decentralized exchange (DEX) Clipper experienced a security incident at 4 am UTC on December 1, targeting its liquidity pools on Optimism and Base.
Chaofan Shou, co-founder of security firm Fuzzland, initially attributed the exploit to a private key leak, allowing the attacker to authorize deposit and withdrawal transactions. Clipper, however, has refuted this explanation, stating that its security model is specifically designed to safeguard against such issues.
<h2 id="the-exploit">The Exploit</h2>
According to the latest <a href="https://x.com/Clipper_DEX/status/1863263893470003460" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">update</a> by Clipper, the attack resulted in the loss of approximately $450,000, representing around 6% of its total value locked (TVL). While the attacker tried to exploit other chains, these attempts were unsuccessful, leaving them and the pools unaffected.
The exploit has since been mitigated, and Clipper assured that it has taken immediate action to safeguard user funds and investigate the breach. All swaps and deposits across chains have been paused temporarily as a precautionary measure.
However, withdrawals remain fully functional, consistent with Clipper’s noncustodial nature, which ensures users retain control over their assets. It is important to note that withdrawals must currently include a mix of all assets in the pool, as the ability to withdraw a single token – identified as the exploited feature – has been disabled.
Addressing speculation regarding the nature of the incident, Clipper <a href="https://x.com/shoucccc/status/1863105036328615958" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">clarified</a> that the exploit was not caused by a private key leak. The team behind the DEX is actively collaborating with security experts to investigate the breach and implement enhanced safeguards thoroughly.
<blockquote>
 “In addition to the investigation, an effort has begun to trace funds to attempt recovery. If you are the exploiter and are willing to speak, please reach out directly. Clipper is committed to transparency and will provide further updates to the community as more information becomes available.”
</blockquote>
<h2 id="hacks-ravage-defi">Hacks Ravage DeFi</h2>
According to Immunefi’s November 2024 <a href="https://cryptopotato.com/hackers-have-stolen-1-49b-ytd-defi-suffers-200-attacks-but-cefi-isnt-safe-either/" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="internal">report</a>, hacks were responsible for an astounding 99.96% of all crypto losses that month. Meanwhile, fraud and rug pulls significantly declined, accounting for just $25,300 across two incidents.
The decentralized finance (DeFi) sector bore the brunt, suffering $71 million in losses – marking the second-lowest monthly total of the year and a sharp drop from $343 million in November 2023.
The post <a href="https://cryptopotato.com/dex-clipper-refutes-private-key-leak-claims-after-breach/" rel="noopener noreferrer nofollow">DEX Clipper Refutes Private Key Leak Claims After Breach</a> appeared first on <a href="https://cryptopotato.com/" rel="noopener noreferrer nofollow">CryptoPotato</a>.

DEX Clipper Refutes Private Key Leak Claims After Breach

Table of Contents

CryptoPotato_News

Other articles published on Dec 2, 2024

XRP Price Nears the $3 Mark – What’s Fueling the Mega Rally? Why is XRP Rising?

Base Network Surges 1,600% in Daily Transactions as Layer 2 Adoption Surges

From $0.045 to $50: How This Token Could Surpass Solana and Avalanche by 2025!

Record-Breaking Ethereum Open Interest: Is a Surge in ETH Price Imminent?

Trump’s inauguration could mark local top for crypto, research shows

Weekly Article Recap: 11/18-11/22

Join our free newsletter for daily crypto updates!