Uniswap volumes bump to $2 billion after attack on DeFi project Harvest Finance 🚨 This article is 4 years old...
Uniswap volumes bump to $2 billion after attack on DeFi project Harvest Finance
2 min read
Updated: Nov. 12, 2020 at 9:56 pm UTC
Harvest Finance, a decentralized finance (DeFi) project led by an anonymous team, was attacked using a flash loan exploit earlier today leading to millions of dollars worth of FARM tokens stolen by hackers and its prices falling over 60% at press time.
“The economic attack was performed through the curve y pool, stretching the price of the stablecoins in Curve out of proportion and depositing and withdrawing a large number of assets through harvest,” explained the Harvest Finance team in a tweet.
The economic attack was performed through the curve y pool, stretching the price of the stablecoins in Curve out of proportion and depositing and withdrawing a large amount of assets through harvest.
To protect users, we've pulled y pool and btc curve strategy funds to the vault
— Harvest Finance (@harvest_finance) October 26, 2020
Attackers seemingly exploited the network using a “flash loan” feature — a tool used to lend assets to crypto-traders for zero collateral as long as the entire transaction is included in a single block.
Simply put, by taking out a huge loan, attackers inflated the price of some tokens on Curve Finance (another stablecoin DeFi project) and used it to falsely extract tokens from Harvest. Block explorer data showed the attackers managed to accumulate over $24 million for their effort.
24m in profits. https://t.co/2d05Lfhx8Q pic.twitter.com/N5BkJ8A7hg
— jiecut (@jiecut42) October 26, 2020
Harvest Finance noted that the exploit was similar to other arbitrage economic attacks, the one from this morning originated with a large flash loan, and “manipulated prices on one money lego (curve Y pool) to drain another money lego (fUSDT, fUSDC), many times.”
“The attacker then converted the funds to renBTC and exited to BTC,” the team said in a tweet.
Like other flashloan attacks, the attacker did not give time to respond, performing the attack in 7 minutes end to end.
Wallet of the attacker exiting through renBTChttps://t.co/O6hqnmtXXC
Source: @devops199fan
— Harvest Finance (@harvest_finance) October 26, 2020
Later on, in an Eminence-esque move, the attackers sent back over $2.4 million to the deployer in the form of USDT and USDC. This amount will be distributed to the affected depositors pro-rata using a snapshot, the Harvest team said in a tweet. However, the move attracted suspicion from some quarters, such as former Monero lead Riccardo Spagni:
“The attacker” sent some funds back because they’re such nice people. If this isn’t strong evidence that “the attacker” and “the devs” are the same then I don’t know what is. https://t.co/lNcE2DkcA6
— Riccardo Spagni (@fluffypony) October 26, 2020
Some like Ex-Messari product head Qiao Wang stated the move was a setback for the anonymous DeFi space:
“Really wanted to see anon/pseudon teams succeed in crypto but so far we still only have BTC and arguably XMR I think. Harvest is a huge setback for anon DeFi.”
Meanwhile, The Block director of research Larry Cermak noted on Twitter that the exploits led to a temporary resurgence of trading volume on decentralized exchange protocol Uniswap. The DEX has suffered in the past few weeks and had its volume trickle down to under $150 million a day — until this morning.
92% of that volume came from USDT/ETH and USDC/ETH pairs. And they generated $5.76 million for LPs in fees. pic.twitter.com/1566htLwfG
— Larry Cermak (@lawmaster) October 26, 2020
The exploit is the latest in a series of DeFi projects that have been attacked or manipulated this year, such as bZx Protocol, Sushiswap, and others.
Harvest Finance Market Data
At the time of press 9:56 pm UTC on Nov. 12, 2020, Harvest Finance is ranked #290 by market cap and the price is down 53.26% over the past 24 hours. Harvest Finance has a market capitalization of $25.94 million with a 24-hour trading volume of $26.85 million. Learn more about Harvest Finance ›
Crypto Market Summary
At the time of press 9:56 pm UTC on Nov. 12, 2020, the total crypto market is valued at at $393 billion with a 24-hour volume of $103.01 billion. Bitcoin dominance is currently at 61.57%. Learn more about the crypto market ›
Mentioned in this article
Latest Ethereum Stories
Featured Story
Advertise Here
In this article
Since its inception, the Uniswap Protocol (“Uniswap”) has served as a trustless and highly decentralized financial infrastructure.
SushiSwap
$0.72579
SushiSwap is an automated market-making (AMM) decentralized exchange (DEX) currently on the Ethereum blockchain.
bZx Protocol
$0.04987
The Utility of BZRX The BZRX token is a governance token, first and foremost.
Curve DAO Token
$0.29097
Curve DAO (Decentralized Autonomous Organization) is a decentralized platform built on the Ethereum blockchain that aims to provide a stable and efficient market for trading stablecoins.
Harvest Finance
$41.5596
Harvest automatically farms the highest yield available from the newest DeFi protocols and optimizes the yields that are received using the latest farming techniques.
Riccardo Spagni, renowned in the cryptocurrency realm, is an influential member of the Monero Core Team, which oversees the Monero Project.
