cryptonews.net
The DFX Finance trading service has been attacked. BlockSec researchers estimate that an unknown attacker siphoned about $7.5 mln from DFX. The DFX Finance team has confirmed the exploit and said it has suspended all smart contracts to contain the issue.
The incident appears to be a flash loan attack that allowed a hacker to maliciously withdraw funds from DFX. Of the $7.5 mln worth of stolen assets, the attacker was only able to transfer $4.3 mln worth of assets to his wallet, including 2,963 ether worth $3.8 mln and about $500,000 in stablecoins.
The remaining portion of the stolen assets – about $3.2 mln – was extracted by an MEV bot in a front-running transaction, also called a sandwich attack. The bot-extracted funds sit in an address controlled by the bot operator and can be recovered if the operator is willing. DFX Finance has already asked the operator to return funds.
Image: TechFunnel