I was reading about the hack to understand what really happened to a whole "decentralized thing"... saw an interesting article on yahoo, checked back later and i could access it again....probably due to my device or something else...
* The article on yahoo appeared this way:
Multicoin Capital-backed DeFi protocol dForce loses ~$25M total locked value in an exploit
Celia Wan
The Block ● April 19, 2020, 4:36 AM UTC
— Well, here are some interesting things I found on the article (summary) :
* dForce, a Multicoin Capital-backed Chinese decentralized finance (DeFi) protocol, has been exploited.
* On the dForce Telegram channel, CEO Mindao Yang said the team is still investigating the issue and advised users not to supply any asset into Lendf.Me now. The team also confirmed the Chinese crypto news site ChainNews that it Lendf.Me was attacked at block height 9,899,681.
* Although details of the exploit were yet to be revealed, it is worth noting that in January,
Lendf.Me integrated with imBTC , an Ethereum token pegged to BTC. Earlier today, a liquidity pool for imBTC on decentralized exchange Uniswap was exploited, resulting in a loss of around $300,000 worth of tokens.
The imBTC attack took advantage of the fact that imBTC uses ERC 777 standard, which allows the hacker to continuously call the Uniswap smart contract to withdraw funds before the external balance could be updated.
On Twitter, some users are speculating that Lendf.Me experienced a similar attack to the imToken one, as transaction records show that the hacker repetitively called Lendf.Me's withdrawal function to take out imBTC that was supplied to the lending protocol by the hacker in the first place.
This scheme, however, was not new. In 2016, the famous DAO hack used a similar mechanism that led to $60 million Ether being stolen. A ConsenSys audit of Uniswap last year also discussed this vulnerability in depth.
* On April 15, dForce just announced a $1.5 million funding round led by Multicoin Capital, with participation from Huobi Capital and China Merchants Bank International (CMBI), the investment arm of one of the biggest banks in China.
The link:
https://finance.yahoo.com/news/multicoin-capital-backed-defi-protocol-043640470.html?guccounter=1&guce_referrer=aHR0cHM6Ly9kdWNrZHVja2dvLmNvbS9sLz9raD0tMSZ1ZGRnPWh0dHBzJTNBJTJGJTJGZmluYW5jZS55YWhvby5jb20lMkZuZXdzJTJGbXVsdGljb2luJTJEY2FwaXRhbCUyRGJhY2tlZCUyRGRlZmklMkRwcm90b2NvbCUyRDA0MzY0MDQ3MC5odG1s&guce_referrer_sig=AQAAANLxu58lZfWJcV8j0esqlub8L7YYjL70j0JSIVnQGLVFkIB5EAz2VPhcMwnnp-_f0jXG8CSL6e_Ud9NKhmZCMEyT5BjuE9D2GOEOoUjDmGrdW6fyxLPH0BEr3-_B3iFg8V8T98z7GjZZggUul-SCkT-Va0ikW2lilVkwFER7wNmSThat ^ doesn't look decentralized even without seeing the details of what really went wrong.
Some desperately trying to give decentralization a bad name? I hope not.
"Defi" community really need serious and honest cleansing of the platform, or maybe abandon it and start something really decentralized and safe?