Curve Finance: Investigation into sDOLA LlamaLend attack initiated; attacker profits are limited

Odaily Planet Daily reports that Curve Finance announced on X platform that it has initiated an investigation into the sDOLA LlamaLend attack, which is suspected to have caused a loss of approximately $240,000. Preliminary findings suggest that the attack was related to the price oracle mechanism used by sDOLA (possibly influenced by a “donation attack”) and the number of sDOLA tokens not used as collateral in the market. Although the attacker’s profit was relatively limited, the incident highlights the need for stricter handling when using vault collateral assets in LlamaLend. The main impact was on users who borrowed against sDOLA collateral, who were liquidated; lenders who provided funds were not affected. The Curve team is further investigating whether other similar markets might be at risk in the future and is working to ensure that LlamaLend V2 remains secure even when facing vault collateral assets vulnerable to donation attacks, across different market sizes. They are currently evaluating detailed solutions and plan to integrate relevant mechanisms into all future markets that use vault collateral.

View Original
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Polkadot to Reset Tokenomics on March 12 With Major DOT Supply and Staking Changes

Polkadot will introduce a new monetary framework on March 12 that sets DOT’s supply cap at 2.1 billion and lowers emissions by 53.6%. The overhaul will also create a Dynamic Allocation Pool and shorten the DOT unbonding period from 28 days to 24–48 hours. On March 12, Polkadot will reset

CryptoNewsFlash1h ago

Builders Are Walking Away From Aave – What Does It Mean for AAVE Price?

Aave (AAVE) is dealing with two very different headlines at the same time. On one side, the protocol faced a $24 million exploit linked to address poisoning, once again reminding users that security risks still exist across DeFi. Despite that incident, the market reaction has been somewhat

CaptainAltcoin3h ago

Western Union Launches USDPT Stablecoin on Solana Network

_Western Union is launching USDPT, a new stablecoin on Solana, backed by 360,000 cash locations across 200+ countries worldwide._ Western Union is making a bold move into the stablecoin space. The global payments giant has announced USDPT, a new U.S. dollar-denominated stablecoin built on Solana

LiveBTCNews4h ago

Japanese Yen Stablecoin: Can Japan Shake Up the $40 Trillion On-Chain Arbitrage Market Worldwide?

Japan is actively promoting the Japanese Yen stablecoin to reshape its position in the global financial market, aiming to strengthen the core role of the Yen through on-chain arbitrage trading. Despite challenges such as liquidity, regulation, and retail participation, its success will bring an important non-USD asset base to on-chain finance.

PANews5h ago

Aave Labs proposes launching the V4 dedicated bug bounty program

Aave Labs proposes to launch the Aave V4 bug bounty program on the Sherlock platform, aiming to establish a security reporting channel with tiered handling to prioritize high-risk vulnerabilities and improve processing efficiency. Sherlock has previously collaborated with Aave on security work.

GateNews5h ago

Self-Custody Startup Bron Adds Inheritance Flow Built Around Guardians and MPC - Unchained

Bron has launched a "Digital Inheritance" feature for its self-custody wallets, allowing heirs access after the owner's death, with a six-month delay and pre-selected guardians for verification. This aims to prevent funded loss due to missing keys or phrases.

UnchainedCrypto5h ago
Comment
0/400
No comments