A price manipulation hack causes Zunami protocol to lose $2.1M

• Zunami Protocol has misplaced $2.1 million resulting from a flash mortgage hack that manipulated costs.
• The hacker used a flash mortgage to inject liquidity.
• The attacker made 1,152 ETH within the course of.

Zunami Protocol, a number one participant within the decentralized finance (DeFi) trade, has suffered a critical setback after a safety breach resulted in a lack of greater than $2.1 million.

The platform’s Curve Finance-hosted liquidity pool was the goal of the assault, which was disclosed by blockchain safety firms PeckShield and Ironblocks.

Hello @zunamiprotocol, we now have detected an ongoing assault. Customers are strongly prompt to take vital actions.

Right here is the encrypted hash: 2638ae2969ce932d61c3ca66f9b8a4a6c01c4d89bb2b34ddcf2c4145960f41c4. Precise hash can be launched as soon as the scenario is steady.

— PeckShield Inc. (@peckshield) August 13, 2023

How the Zunami hack was carried out

The Zunami Protocol, which largely operates by means of the “zStables” pool on the Curve community, allows decentralized change (DEX) companies for stablecoins throughout the Ethereum ecosystem. By enabling customers to diversify their stablecoin holdings, the protocol makes an attempt to decrease the chance related to the eventual demise of any given stablecoin.

In response to Ironblocks, the attacker initiated the assault by leveraging a flash mortgage from the “balancer.”

This mortgage allowed the hacker(s) to inject liquidity into the system, permitting them to significantly manipulate the worth. The attacker then went forward to commerce on the change with the newly created liquidity. Afterwards, they manipulated the worth as soon as extra and withdrew the funds and returned the flash mortgage, making a revenue of 1,152 ether (ETH) within the course of.

Impact on Zunami native belongings

The hack significantly impacted the costs of Zunami’s native belongings. Firstly, the Zunami USD stablecoin (UZD) declined by over 98%. Secondly, the Zunami Ether (zETH) dropped by over 85%, settling at $278.

Including to the complexity of the hack, the stolen funds had been channelled by means of Twister Money, a controversial crypto-mixing service platform.