@CryptoWordsmith
edited
Harvest Finance is the latest DeFi platform to get hacked
Decentralized finance (DeFi) projects have become extremely popular over the past year. They allow customers to borrow or lend crypto coins or tokens without the need for a financial intermediary such as a bank. Smart contracts allow all the transactions to be handled automatically. But DeFi projects have been increasingly targeted by criminals because they have attracted so much capital in such a short period of time. Harvest Finance is the latest DeFi platform to be victimized. With over $400 US million worth of total locked value (TVL), they made the following announcements on Twitter yesterday. https://harvest.finance/
What was unusual is that Harvest Finance managed to identify who the hacker was early today, but they declined to publish that individual's personal information. Furthermore, they *tried to ask the thief to return the funds* that were stolen.
The hack is still unresolved, as the hacker had stolen $24 million, but returned $2.5 million. Harvest Finance's native token (FARM) has also fallen about 50% in the wake of the hack. https://www.coingecko.com/en/coins/harvest-finance To their credit, Harvest Finance has taken responsibility for the error in their code that allowed this breach. https://medium.com/harvest-finance/harvest-flashloan-economic-attack-post-mortem-3cf900d65217
I must admit that I was very tempted to experiment with a number of DeFi platforms over the past few months. This latest setback in the space has shown that individuals should be extremely careful, and do their own research before investing in this space. The Harvest Finance incident follows on the heels of two other hacks over the past 6 weeks (Yearn and Bzx) and if I was invested in DeFi, I would move my crypto out now. https://www.crypto-news-flash.com/ethereum-defi-hacker-steals-15-million-from-yearn-creators-project/ https://cointelegraph.com/news/defi-platform-bzx-sees-new-8m-hack-from-one-misplaced-line-of-code It was also hard not to notice this tweet by a centralized finance platform throwing some shade at their competition in the DeFi space.
Thanks for reading, and stay safe! If you would like to support my work, please hit like 👍 and subscribe! 😊 Follow me on Twitter: ***@CryptoWordsmith*** https://twitter.com/CryptoWordsmith **#EarnFreeCrypto** https://read.cash/search?q=%23EarnFreeCrypto **#EarnPassiveIncome** https://read.cash/search?q=%23EarnPassiveIncome Lead Image: Harvest Finance logo - Screen cap from harvest.finance Tweets: captured from Twitter
It's the perfect time to start earning free crypto while you learn about it!
If you want to earn free BCH, **read.cash** is always looking for new members and for aspiring authors. Previous writing experience is not required! I invite you to create an account using my referral link by clicking **here**. https://read.cash/r/CryptoWordsmith
The **Publish0x** community is also looking for new members and for aspiring authors. Previous writing experience is not required here either! This is a friendly environment where you can earn ETH, BAT, or LRC tokens for free! I invite you to create an account using my referral link by clicking **here**. https://www.publish0x.com/the-kragles-crypto-journey/want-your-posts-to-start-trending-on-publish0x-heres-how-to-xqozjnk https://www.publish0x.com/?a=N1aMjM3bWm *Related reading:* *How to start trending on Publish0x* https://www.publish0x.com/the-kragles-crypto-journey/want-your-posts-to-start-trending-on-publish0x-heres-how-to-xqozjnk
I'm earning up to 8.6% annual interest compounded monthly on my crypto deposits at BlockFi, and you can too. When you sign up for a free account using my referral link by clicking here, we can both receive a bonus! https://www.publish0x.com/the-kragles-crypto-journey/how-i-will-earn-20-dollars-in-free-bitcoin-from-blockfi-xevrnz https://blockfi.com/?ref=2367ce86 BlockFi hack: You can even choose which cryptocurrency to receive your interest payments in! *Related reading:* *How I will earn $20 in free Bitcoin from BlockFi* https://www.publish0x.com/the-kragles-crypto-journey/how-i-will-earn-20-dollars-in-free-bitcoin-from-blockfi-xevrnz
You can also earn free crypto such as EOS or XLM by watching Coinbase Earn videos! Register for your free account using my referral link here, and we can both receive a bonus! https://coinbase.com/earn/eos/invite/yw4p3ckd https://coinbase.com/earn/xlm/invite/qxg1tdbc https://www.coinbase.com/join/mark_br Thanks for your support! Resources: https://medium.com/harvest-finance/harvest-flashloan-economic-attack-post-mortem-3cf900d65217 https://news.bitcoin.com/defi-protocol-harvest-finance-hacked-for-24-million-attacker-returns-2-5-million/
24 comments
Simply because their security is not that safe. They putting any ones money at risk because of the low class of security that they have.
they need to take a look at the coding.
They should have.
Too sad for them.. Hackers are really everywhere
they tend to stay one step ahead of everyone else. thx for visiting!
True.. Any online platforms are really prone into it
Wow, that was unbelievable to read what was going on. More exciting than many hacker movies. (at least if you're not invested with your life savings.) I have to hand it to Harvest Finance. They did a fantastic job of taking responsibility, being transparent about what is going on and the fact that they received part of the money back (at least) is fantastic. Let's hope they get most of it back. And I agree with you. I would also get my funds out of DeFi if I had any in it.
Multinational corporations spend millions to keep hackers out. i would be curious to know how much these DeFi platforms spend in comparison. my guess is that all DeFi plaforms are at risk right of being hacked right now. and it's a good thing that both of us are risk averse to this space right now.
As a humble farmer I am directly affected but they redacted quick and I think they will bounce back
oh friend, i completely forgot you had a stake...i'm sorry this happened. i hope there's a good outcome, and a solid recovery. and thx for the tip!
They stopped everything quick. Price dropped from $250 to $60 and recorded to $100
that's very impressive actually! how do you feel about the DeFi space? I honestly think there hasn't been enough security audits done on the coding.
Harvest.Finance just passed 2 audits. The situation is a bit weird as some experts started to complain about their system and than the hack happened
That's terrible! And he what? returned $2.5 out of the $24 million he stolen? He must give it all back and work his ass instead. 😾
these types of criminals often see this as a challenge for their skill, offering an opportunity to brag. but i don't think this one was very good at hiding his/her tracks, as evidenced by some of the tweets that were sent out.
That why is important to have hired people to audit your codes before making your smart contract available.
thanks for visiting!
My pleasure.
Oh no! This simply means that the system is not secure. I hope trading/ investing platforms should invest in tightening its security.
it's interesting because PVMihalache says they passed 2 audits. it looks like the code was fine, but the method of manipulating the transactions and trading price was where the exploit took place.
Some of them are so dodgy, Sushi get the first prize, then i can think at few more. Just imagine, last year you will call crazy someone investing on a platform with anonymous creator and no audit, now is trendy, and some of these have 1 billion in funds. I try them, but like, 50$ here, 50$ there, and if the 50 become 150, they are changed instantly and sent to my Celsius. Also, they are doing the audit from a normal person perspective, but a hungry hacker will try again and again, in many different ways, until they find a little backdoor. If i would have a crypto project, i will pay some russian and chinese hackers to test it while in beta, with a bounty for every vulnerability found, this is how you do it, not only audit. They want your money and they will find every vulnerability fast.
Chef Nomi!!!! Lol 😂 i agree...they need more white hat/hackerthon involvement. and yes, the DeFi explosion was so fast! i'm staying on the sidelines for a while btw, your article about this was better than mine that i wrote too fast. thx for visiting and for the tip my friend!
Thats so great information. I like to read it
thanks for visiting!