Another Day... Another Hack: Someone left the Pickle jar open!
Another day... another hack! How safe is the DeFI world? Looks like a DeFi pool is hacked every week, while other scams are lurking in the shadows. Pickle Finance is the newest name of projects which were hacked recently, joining Kucoin, Harvest Finance, Akropolis, Origin USD and other projects targeted by cyber attacks. Over $100 million were stolen from DeFi projects in 2020, with more than 50% happening since June. My knowledge about Pickle is limited, as I just seen the name in one of Harvest Finance's pools. Basically, Pickle Finance is focusing on providing an automatic solution for moving funds between various DeFi protocols in order to maximize the profits and rewards. The deposit of Compound is required for trading and arbitration.
Over $20 million worth of DAI were stolen from Pickle Finance on Saturday 21st of November, due to a code vulnerability. The exploit took advantage of the Dai pJar, which leverages Compound to harvest yield for DAI liquidity providers. The address used for the attack is 0x70178102AA04C5f0E54315aA958601eC9B7a4E08, and the stolen funds where not moved from there until Sunday. https://etherscan.io/address/0x70178102aa04c5f0e54315aa958601ec9b7a4e08#tokentxns Pickle Finance didn't explained how the exploit happened but the Pickle value dropped by 40% after the hack. Harvest Finance moved all DAI from pools into vaults, as a measure of precaution. This cyber attack was not the usual a flash loan that exploited a vulnerability in the code, similar to what happened to Origin USD and Harvest Finance, but a corrupted contract that was used to fake legitimate contracts. The attacker created contract that mimicked the original contract, quickly exchanging fake cDAI with real cDai between the contracts.
This tsunami of DeFi hacks is a clear sign of how immature the ecosystem is and another example of new DeFi products that are not good enough, with no audits and low security. The $20 million from Pickle will join the millions stolen from Harvest Finance, Origin USD, Balancer, Akropolis, etc. **Links and referrals:** $100 millions stolen from DeFi in 2020 https://news.bitcoin.com/hackers-stole-100-million-defi-projects/ Pickle got hacked https://www.theblockcrypto.com/linked/85370/defi-project-pickle-finance-exploited-for-nearly-20m Join the CakeDeFi revolution and get $30 worth of DeFiChain (DFI) https://pool.cakedefi.com/#?ref=823289 **Coinbase Earn**: **BAND**, **COMP**, **Orchid** & **EOS** https://coinbase.com/earn/band/invite/bv30gyk1 https://coinbase.com/earn/comp/invite/g7hf830w https://coinbase.com/earn/orchid/invite/2fh17zrm https://coinbase.com/earn/eos/invite/d1ztp30q **Amazon author page:** **PV Mihalache** https://www.amazon.co.uk/-/e/B019FB0ZNG **Quality Faucets:** **Free-Litecoin.com (LITECOIN)** https://free-litecoin.com/login?referer=895809 **Stakecube (20 daily faucets)** https://stakecube.net/?team=sadu1 Tier 4 referral system: **Horizen (ZEN)** & ZCash from **PipeFlare** & **GlobalHive** https://getzen.cash/auth/register?ref=252508 https://pipeflare.io/r/zxn https://globalhive.io/auth/register?ref=1917 **FreeCryptos Gang**: **DASH**, **TRX**, **ETH**, **ADA**, **BNB**, **LINK**, **NEO**, **BTC** **&** **LTC** https://freedash.io/?ref=3945 https://free-tron.com/?ref=24942 https://freeethereum.com/?ref=39797 https://freecardano.com/?ref=228676 https://freebinancecoin.com/?ref=32397 https://freechain.link/?ref=1187 https://freeneo.io/?ref=1474 https://freebitcoin.io/?ref=319383 https://free-ltc.com/?ref=737 **Coinpot Gang:** **DASH**, **BCH**, **DOGE**, **LTC**, **BTC**, **BTC2**, **BTC3** & **BTC4** http://moondash.co.in/?ref=D6EA38BF9E32 http://moonbitcoin.cash/?ref=E09F6730A19D http://moondoge.co.in/?ref=E09C54FEC554 http://moonliteco.in/?ref=49E875DC0626 http://moonbit.co.in/?ref=BE0EDE0CD1DC https://freebitco.in/?r=7275997 https://www.publish0x.com/editPost/%20http:/bitfun.co/?ref=85ADC4ABB1DB http://bonusbitcoin.co/?ref=21B8410293C1 **I earn crypto for reading and writing on** ****Publish0x**** **and** ****ReadCash******, watching videos on** ****Lbry.tv**** **and surfing online on** ****Brave Browser**** **and** ****Presearch******. I use** ****Swapzone**** **for the lowest fee swaps** https://www.publish0x.com/?a=pmbk1p5ezJ https://read.cash/r/PVMihalache https://lbry.tv/$/invite/@MindPuzzles:9 https://brave.com/pvm417 https://presearch.org/signup?rid=1695040 https://swapzone.io/?refId=pvmihalache
3 comments
Another day, another hack. So strange the crypto-world.
But Pickle is funny
But what actually is this Pickle?