DeFi lender backed by Jump Crypto users vulnerable to attack according to web3 researchers

Dilation Effect, a web3 security research firm, issued a warning about Jump Crypto backed DeFi lender Prime Protocol. The protocol is a newly launched DeFi lender with upwards of $1.6 million in Total Value Locked (TVL). 

Also read: Three reasons why Litecoin whales could push LTC price to $100 before third halving

DeFi lending protocol at risk of suffering a security breach

Web3 security researchers at Dilation Effect issued a warning regarding Prime Protocol. The protocol is a newly launched cross-chain DeFi lending agreement with $1.6 million in TVL. The Jump Crypto backed protocol has a unique feature that allows others to complete deposit operations on behalf of the users. 

This implies once the user has authorized the contract, anyone else can access the authorized assets in the user's address and deposit them into lending pools without further permissions. While this has not resulted in a security breach yet, in the event that Prime Protocol gets hacked, an attacker can move all authorized user assets to a lending pool before draining it. 

No additional permissions are required from the user, which puts the protocol's TVL and all authorized user assets at risk. 

How users of the DeFi lending protocol can get affected

Prime Protocol is deployed across chains and currently supports Ethereum, Arbitrum, Avalanche, and Moonbeam. If users have authorized assets on multiple chains, their holdings on these chains will be vulnerable to security breach. 

Web3 researchers have recommended that the project fix the concerns and make improvements to secure user assets. 

Prime Protocol's response and the road ahead for users

Prime Protocol responded to Dilation Effect's critique and addressed the specific functionality in their contracts. The protocol explained that the team is promptly taking action to address the concerns and will provide a comprehensive explanation of the solution once it is complete.

In their response, the team reiterated that the security of user funds is their top priority and the concerns surrounding the security breach will be addressed in their next steps.