LI.FI loses estimated $9 million in exploit
Quick Take Cross-chain blockchain protocol LI.FI has lost around $9 million in an exploit, security firms say. The team has asked users to avoid the protocol and revoke permissions. Security firm Peckshield alleges a similar attack affected LI.FI in 2022.
Cross-chain blockchain protocol LI.FI has been exploited, the team said on the social media platform X. The team is investigating the possible hack, which appears to only affect users who manually set certain features.
"Please do not interact with any LI.FI powered applications for now," the LI.FI team wrote. "We're investigating a potential exploit. If you did not set infinite approval, you are not at risk."
“[W]e urge all users to immediately use our secluded revoke website,” LI.FI wrote, adding that “4 more security breaches have been identified.”
Security firm Decurity said the “root cause” appears to be “an arbitrary call with user controlled data” to a gas contract deployed five days ago to pay blockchain fees on Ethereum ETH +1.23% .
“The hacker crafted special calldata with transferFrom() calls and passed it as swapData to depositToGasZipERC20 to steal approved tokens from the bridge,” Decurity researchers wrote on X.
The attack appears to be a version of the “call injection” exploit that allows attackers to use parameters in the original code to execute legitimate, but unexpected transactions. This type of vulnerability reportedly caused hundreds of millions of dollars worth of crypto to be lost.
A wallet containing drained funds controls over $4 million in ETH and nearly $200,000 in DAI stablecoins, according to DeFi World data . However, that amount is likely an understatement, as USDT and USDC stablecoins also appear to be leaving the platform. Security firm Certik estimates the total losses at around $9 million.
Peckshield , another security firm, alleges a similar attack hit LI.FI in 2022.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Lombard: GPIF's overweight position in Japanese bonds may trigger global carry trade unwinding; Banco Santander: GPIF may sell $62 billion in US Treasuries!
Lombard Global Macro Research pointed out that GPIF is currently or will soon accelerate the repatriation of funds into Japanese domestic bonds. This structural capital inflow will drive the USD/JPY below 150 and indicates a fair value range between 130 and 140. Furthermore, the risk of passive deleveraging in global carry trades has not yet been fully priced in by the market. Banco Santander noted that, due to the increased attractiveness of domestic Japanese assets under the current policy framework, GPIF may reduce its holdings of US Treasuries by up to $62 billion.
Overnight US Stocks | US August CPI accelerates upward, three major indices posted weekly losses, US crude oil surged nearly 10% this week
At market close, the Dow Jones Industrial Average rose 509.19 points, or 0.98%, to 52,573.29 points; the S&P 500 Index gained 65.28 points, or 0.86%, to 7,656.98 points; and the Nasdaq increased 251.32 points, or 0.96%, to 26,333.04 points.
US inflation exceeds expectations again! Probability of a Fed rate hike in September rises above 85%, market starts betting on another hike this year
U.S. inflation rose again in August, putting increasing pressure on Federal Reserve Chairman Waller to consider an interest rate hike at next week's monetary policy meeting.
Crypto prices
More
