Ethereum-Based Synthetic Asset Platform Loses Over 37M Tokens in Oracle Attack

The Ethereum-based synthetic asset issuance platform Synthetix has lost over 37 million synthetic ETH (sETH) in an oracle attack, according to a report by The Block on June 24.

While the amount of sETH in question is known to be over 37 million, the price of this loss in U.S. dollars is reportedly unknown due to its relative illiquidity on secondary markets.

Synthetix allows users to mint and trade synthetic currencies peer-to-peer (P2P) on the Ethereum blockchain. One such synthetic currency is the token sETH, which apparently tracks the price of Ether using an oracle-backed price feed. 

Synthetix CEO Kain Warwick purportedly commented in the official Discord channel for Synthetix, saying:

"There has been an incident with the price feed of sKRW, we are currently investigating the root cause, but during the time when the price feed was returning the wrong value we believe an automated arb bot converted into sKRW and then into sETH."

Warwick reportedly believes the so-called ‘attack’ was performed automatically by an arbitrage bot and is seeking to contact the bot owner to correct the problem.

In the meantime, Synthetix has reportedly put a hold on all transactions, which it can apparently do as it has total control over its smart contracts. Warwick has also issued a bug bounty to solve and prevent this issue from occurring in the future.

As previously reported by Cointelegraph, white hat hackers claimed more than 40 bug bounties over 30 days in March. The bug finders received a cumulative total of $23,675, about a third of which came from the consensus algorithm and P2P networking protocol company Tendermint.