"Saddest Hack in Crypto": Value DeFi Hacked for $6 Million
2 min read
This one is upsetting. Yesterday, decentralized finance protocol Value DeFi tweeted that it is “very excited with our most recent innovation, the MultiStables Vault, and we strive to ensure your funds are always SAFU with our vaults.” Lots of emojis, lots of pride in one’s work.
Then today: “The MultiStables vault was the subject of a complex attack that resulted in a net loss of $6M. We are currently working on a postmortem and are exploring ways to mitigate the impact on our users.”
The MultiStables vault was the subject of a complex attack that resulted in a net loss of $6M. https://t.co/dnFRa5yPBJ
We are currently working on a postmortem and are exploring ways to mitigate the impact on our users.— Value DeFi Protocol (@value_defi) November 14, 2020
The Telegram group, before Decrypt was banned, was a mixture of distress and anxiety. The usual: some community members still in a daze from the attack, and others rushing to put out the FUD—Fear Uncertainty and Doubt. The Discord chat is currently a mess.
It appears as though the attack was down to a flash loan. The attacker took out a flash loan to affect the prices of tokens held within curve finance vaults, then bought them for a low price and paid back the loan, netting a profit.
The MultiStables Vault was supposed to have the following advantages: “1) Flash-loan attack prevention 2) Fake-token attack prevention 3) Re-entrance attack prevention.” It turns out it has none of these.
Bebis told Decrypt, “The team are a bunch of great guys, the community management was about the best I’ve seen…they hired community members, promoted community artwork, and made fantastic progress every week. I doubt they’ll give up after this but it’s sad to see the community torn apart.”
And then…whoosh, the token’s price falls off a cliff.
Value DeFi’s Discord ChatA sad day for decentralized finance.
