dForce lending protocol was attacked by a Hacker, and all of the $25 million stolen assets have been recovered.

robot
Abstract generation in progress

The dForce lending protocol incident involving a hacker attack

On April 19, 2023, dForce's decentralized lending protocol Lendf.Me was hacked, resulting in the theft of approximately $25 million in crypto assets. In the following 48 hours, the team worked tirelessly to track the hacker and the stolen assets.

Event Timeline:

On April 19th at 8:58 AM, the Hacker began attacking the Lendf.Me contract. By 11:32, the Hacker completed the attack and stole assets. At 12:57, the Lendf.Me and USDx contracts were closed.

Countermeasures:

  • 11:00-14:00, the team collaborates with investors, contacting major stablecoin issuers, DeFi protocol teams, exchanges, and wallet service providers to request monitoring and freezing of related accounts.

  • Starting from 12:00, report the cause of the attack and the status of assets to the relevant parties, and be required to provide a police enforcement letter.

  • That afternoon, dForce formed a temporary alliance with several security teams to begin recovering assets.

  • 22:12, Hacker left a message on the chain "Better Future".

  • Starting from 22:16, hackers gradually transferred small amounts of assets to the Lendf.Me management address.

  • 22:43, the team left contact information on the chain, indicating a willingness to communicate.

  • 22:53, officially applying to the Singapore police for a mandatory execution letter.

April 20:

  • The police provide a mandatory enforcement letter to relevant parties, requiring them to monitor and freeze accounts.

  • The security team identified the hacker's profile and obtained important clues.

  • 18:17, Lendf.Me administrator left a message on the chain "Contact us for a better future for you".

April 21:

  • 13:33, the Hacker actively communicated with the team and began to return part of the assets.

  • All stolen assets were successfully recovered before 17:00. The team submitted a withdrawal application to the police.

The dForce team emphasizes that they have not received any sensitive user information from any partners. Finally, the team expresses heartfelt thanks to the partners, users, and investors who provided support and assistance.

DF1.9%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 7
  • Repost
  • Share
Comment
0/400
PriceOracleFairyvip
· 08-05 08:52
wen oracle patch? smh these exploits r getting predictable af
Reply0
TokenCreatorOPvip
· 08-03 17:04
Black eats black and then is eaten back.
View OriginalReply0
NFTRegrettervip
· 08-02 16:18
Hacker changed his mind halfway?
View OriginalReply0
BlockchainRetirementHomevip
· 08-02 16:16
The hacker's hands are quite fast, it's ridiculous.
View OriginalReply0
just_another_fishvip
· 08-02 16:09
It's another day's suckers news.
View OriginalReply0
PumpStrategistvip
· 08-02 16:06
Another arbitrage opportunity from a smart contracts vulnerability. Just look at the K-line to know that long positions are on the verge of collapse.
View OriginalReply0
DiamondHandsvip
· 08-02 15:59
The tea art master helps Yang play people for suckers.
View OriginalReply0
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)