Ad
News
Defrost finance says it has recovered lost funds worth $12 million from hacker Defrost finance says it has recovered lost funds worth $12 million from hacker

Defrost finance says it has recovered lost funds worth $12 million from hacker

On Dec. 23, Defrost Finance experienced a hack in which an attacker used the flash loan function to withdraw funds.

Defrost finance says it has recovered lost funds worth $12 million from hacker

Cover art/illustration via CryptoSlate. Image includes combined content which may include AI-generated content.

Decentralized leverage trading platform on Avalanche, Defrost finance reported that all the funds lost due to an exploit on its platform on Dec. 23 were returned on Dec. 26 after claims of a possible rug pull.

Defrost Finance affirmed that it would return all the lost funds to the exploited users after scanning the on-chain data to determine the ownership and amount of funds owned by each affected user.

Earlier, the Avalanche-based protocol reported the platform had been hacked, with an attacker withdrawing funds using the flash loan function.

On Dec.24, the firm claimed that only their V2 product was affected, and V1 remained safe.

However, on Dec. 25, the team reported the hacker also obtained the owner key for a larger attack on the platformโ€™s V1 product.

The hacker made almost $173k from the exploit, according to blockchain analytics firm PeckShield.

Upon further analysis, PeckShield revealed that a fake collateral token was added. A malicious price oracle was used to liquidate current users for a total loss of more than $12 million, indicating a possible rug pull.

Further, blockchain security firm Certik claimed that the exploit was an exit scam after they couldn’t get any response to their queries from Defrost Finance team.

On the same note, DeFiYieldApp, a Web3 security firm, tweeted that they warned the DeFi Community one year ago about the Defrost Finance smart contract vulnerability that allows the firm to rugpull its users.

Even though there are no clear indications whether the hack was a rug pull, the firm has shown a willingness to negotiate with the hackers to return funds.

On Dec. 25, the total value of funds locked on the protocol had dropped to less than $93,000 from $13.16 million after the attack, according to DefiLlama data.

Posted In: , DeFi, Hacks