bitcoin
Bitcoin (BTC) $ 17,225.09
ethereum
Ethereum (ETH) $ 1,281.59
tether
Tether (USDT) $ 1.00
bnb
BNB (BNB) $ 290.01
usd-coin
USD Coin (USDC) $ 1.00
binance-usd
Binance USD (BUSD) $ 0.999560
xrp
XRP (XRP) $ 0.392230
dogecoin
Dogecoin (DOGE) $ 0.098171
cardano
Cardano (ADA) $ 0.314995
matic-network
Polygon (MATIC) $ 0.925808
polkadot
Polkadot (DOT) $ 5.44
staked-ether
Lido Staked Ether (STETH) $ 1,266.00
litecoin
Litecoin (LTC) $ 77.08
shiba-inu
Shiba Inu (SHIB) $ 0.000009
okb
OKB (OKB) $ 20.96
dai
Dai (DAI) $ 1.00
solana
Solana (SOL) $ 13.72
tron
TRON (TRX) $ 0.054002
uniswap
Uniswap (UNI) $ 6.19
avalanche-2
Avalanche (AVAX) $ 13.40
leo-token
LEO Token (LEO) $ 3.82
chainlink
Chainlink (LINK) $ 7.03
wrapped-bitcoin
Wrapped Bitcoin (WBTC) $ 17,208.45
cosmos
Cosmos Hub (ATOM) $ 9.80
the-open-network
Toncoin (TON) $ 1.82
monero
Monero (XMR) $ 147.26
ethereum-classic
Ethereum Classic (ETC) $ 19.17
stellar
Stellar (XLM) $ 0.085508
bitcoin-cash
Bitcoin Cash (BCH) $ 111.80
quant-network
Quant (QNT) $ 122.26
crypto-com-chain
Cronos (CRO) $ 0.064758
algorand
Algorand (ALGO) $ 0.225212
filecoin
Filecoin (FIL) $ 4.43
near
NEAR Protocol (NEAR) $ 1.70
apecoin
ApeCoin (APE) $ 3.94
vechain
VeChain (VET) $ 0.019090
hedera-hashgraph
Hedera (HBAR) $ 0.047980
internet-computer
Internet Computer (ICP) $ 4.31
eos
EOS (EOS) $ 1.00
trust-wallet-token
Trust Wallet (TWT) $ 2.61
flow
Flow (FLOW) $ 1.04
elrond-erd-2
MultiversX (Elrond) (EGLD) $ 45.03
terra-luna
Terra Luna Classic (LUNC) $ 0.000174
frax
Frax (FRAX) $ 1.00
the-sandbox
The Sandbox (SAND) $ 0.594627
axie-infinity
Axie Infinity (AXS) $ 8.15
tezos
Tezos (XTZ) $ 1.00
aave
Aave (AAVE) $ 63.15
theta-token
Theta Network (THETA) $ 0.872707
huobi-token
Huobi (HT) $ 6.54

Hacker Withdraws 200 Billion Fake BitBTC From Optimism Bridge

0

- Advertisement -



The Optimism bridge supporting privacy coin BitBTC is actively being exploited for 200 billion BitBTC tokens. 

Due to the technicals of the hack, the BitBTC team now has less than 7 days to implement an upgrade to minimize the damages.

A Poorly Designed Bridge

According to Arbitrum tech lead Lee Bousfield on Twitter, the BitBTC bride contained a “critical exploit” that left it “trivially vulnerable.” It involves the bridge’s relationship between Ethereum’s layer 1 (L1) addresses and Optimism’s layer 2 (L2) addresses. 

As Bousfield explained, Optimism’s L2 side of the bridge lets users withdraw any token, and pick the L1 token address to which the tokens will pass on the L1 side of the bridge. 

However, when the L1 side mints tokens, it simply ignores which token was withdrawn by the layer 2 side in the first place. This means an attacker could mint their own worthless token on Optimism, yet set its L1 token address to a real BitBTC L1 address. 

“Then, when the attacker withdraws their malicious token through the BitBTC bridge, it gives them real BitBTC tokens on L1,” explained Bousfield. 

The tech lead added that the hack would take seven days to conduct – leaving a window of opportunity for devs to patch the system if the exploit were targeted. 

Unfortunately, that’s exactly what happened on Monday, as an attacker withdrew 200 billion fake BitBTC from the system. The dollar value of these tokens is unclear, as BitBTC does not have publicly available market data. 

“The BitBTC team has 7 days to fix it on L1!” warned Bousfield.

The tech lead clarified that the bug is exclusive to BitBTC, rather than being the fault of Optimism. He also said he’s contacted the BitBTC team both before and after the bug took place, but is “still looking for signs of life.”

The exploiter has claimed that his attack is merely meant to test the attack vector. 

The Binance Bridge Bug

In a similar fashion, Binance bridge was exploited earlier this month, allowing a hacker to mint $2 million BNB (worth $500 million) out of thin air. 

Bridges are designed to let crypto users transfer their tokens between different blockchains. While some bridges use centralized/federated systems with trusted third parties to manage the bridge, others use more complex systems based on code. The latter, however, can be prone to bugs that let hackers withdraw illegitimate funds. 

At present, blockchain bridges have been the largest victims of DeFi hacks, accounting for $2.5 billion in lost assets. 

SPECIAL OFFER (Sponsored)
Binance Free $100 (Exclusive): Use this link to register and receive $100 free and 10% off fees on Binance Futures first month (terms).

PrimeXBT Special Offer: Use this link to register & enter POTATO50 code to receive up to $7,000 on your deposits.



Source link

- Advertisement -

Leave A Reply

Your email address will not be published.

Shares