- Pickle Finance loses #20 million in stablecoin DAI.
- The token of the project loses over 50% of its value.
Another liquidity mining project fell victim to the hack attack and lost about $20 million of users' funds in DAI tokens. The attacker exploited the vulnerability of Pickle Finance smart contract called DAI PickleJar using fake swaps.
Notably, the hacker chose to avoid a flash loan scheme used in most similar incidents recently. Instead, they deployed a malicious jar and passed in fake swaps.
Emiliano Bonassi, a founder of DeFi Italy and a white hacker, explained in the recent tweet:
Evil jars deployed during the attack and passed in the swapExactJarForJar. In addition, in the second invocation for swapExactJarForJar, there were passed a target and doing a delegate call to CurveProxyPool.
He also added that the attacker used a really elaborate scheme.
The team of the project confirmed the exploit and said that 19,759,355 DAI were drained. They also added that the attacker used a very complicated scheme involving many components from the Pickle protocol. Currently, the team is working on the solution together with a group of white hackers.
While we work on the fix to remove the attack vector, the white hat group has decided that we should not publish any details of the actual attack yet. Although we have taken steps to mitigate further attacks, we do not want to tempt fate in the meantime.
The token of the project (PICKLE) lost over 50% of its value after the hack attack. The price tested the low of $8.84 before recovering to $12 by the time of writing. The project takes 2333 place in the global cryptocurrency market rating, while its total capitalization remains unknown.
Pickle allows users to earn PICKLE tokens in exchange for liquidity in four stablecoin pools: DAI/ETH USDC/ETH USDT/ETH sUSD/ETH.
Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers. The author will not be held responsible for information that is found at the end of links posted on this page.
If not otherwise explicitly mentioned in the body of the article, at the time of writing, the author has no position in any stock mentioned in this article and no business relationship with any company mentioned. The author has not received compensation for writing this article, other than from FXStreet.
FXStreet and the author do not provide personalized recommendations. The author makes no representations as to the accuracy, completeness, or suitability of this information. FXStreet and the author will not be liable for any errors, omissions or any losses, injuries or damages arising from this information and its display or use. Errors and omissions excepted.
The author and FXStreet are not registered investment advisors and nothing in this article is intended to be investment advice.