Euler Finance exploiter returns one other $37.1M price of ETH and DAI
The architect of the March 13 Euler Finance exploit returned a further $26.5 million price of Ether (ETH) to the Euler Finance deployer account on March 27, on-chain information exhibits.
One other 13M for ze Euler workforce
20M dai left within the pockets that despatched this over
Let’s get it pic.twitter.com/rF8l6e7yYw
— DCF GOD (@dcfgod) March 27, 2023
At 6:21 pm UTC, an handle related to the attacker sent 7,738.05 ETH (price roughly $13.2 million on the time it was confirmed) to the Euler deployer account. In the identical block, one other handle related to the attacker sent an equivalent quantity to the identical deployer account, for a complete of 15,476.1 ETH (round $26.4 million) returned to the Euler workforce.
Then, at 6:40 pm UTC, the primary pockets sent one other transaction to the deployer account for $10.7 million price of the Dai (DAI) stablecoin. This brings the full of all three transactions to roughly $37.1 million.
Each of those addresses have acquired funds from the account that Etherscan labels “Euler Finance Exploiter 2,” which appears to suggest that they’re underneath the management of the attacker.
These transactions follow a previous return of 58,000 ETH (price over $101 million on the time) on March 25. In complete, the attacker seems to have returned over $138 million price of crypto property for the reason that exploit.
Ethereum-based crypto lending protocol Euler Finance was exploited on March 13, and over $195 million price of ETH and tokens have been drained from its sensible contracts. A number of protocols throughout the Ethereum ecosystem relied on Euler in a technique or one other, and not less than 11 protocols have introduced that they suffered indirect losses from the assault.
Based on an evaluation by Slowmist, the exploit occurred due to a defective operate that allowed the attacker to donate their lent Dai to a reserve fund. By making this donation, the attacker was capable of push their very own account into insolvency. A separate account was then used to liquidate the primary account at a steep low cost, permitting the attacker to revenue from this low cost.
After draining Dai by this primary assault, the attacker then repeated it for a number of tokens, eradicating over $196 million from the protocol.