BitRss.com latest World Crypto News

Search and discover the latest Cryptocurrency updated Stories in Categories

24-7 World Cryptocurrency News about Blockchain, Technology and much more, only from Top Leading Sources

Metaverse Project Paraluni Hacked: Reportedly $1.7M Lost

Metaverse Project Paraluni Hacked: Reportedly $1.7M Lost

Today morning Paraluni was exploited in a series of txs. One of the tx is 0x70f367b9420ac2654a5223cc311c7f9c361736a39fd4e7dff9ed1b85bab7ad54. The exploit lead to the gain of ~$1.7M for the hacker.



According to our PeckShield , the hack is made possible due to a reentrancy bug (introduced by the use of a crafted token contract) in the depositByAddLiquidity() function, which somehow doubles the credits the hacker is able to claim as one can see in the below image.



Bug



To illustrate further the hack tx was used and the key steps were taken out. The hacker first Flashloan 156,984 USDT and 157,210 WBNB. Then used ParaRouter addLiquidity (156,984 USDT and 157,210 WBNB) to UBT and get 155,935 LP_USDT_BUSD. The hacker then deposited fund by DepositByAddLiquidity into MasterChef by _tokens=[UGT, UBT]. The next step hacker did was ParaRouter. addLiquidity (tokenA=UGT, tokenB=UBT) then hacker reentrancy from UBT transferFrom to call Masterchef. deposit 155,935 LP_USDT_BUSD to UBT and receive 1 Para-LP_UGT_UBT.



Renentrancy



The next step was UBT.withdrawAsset from MasterChef 155,935 LP_USDT_BUSD to UBT, then to hacker contract. The next step used is to Withdraw 155,935 LP USDT BUSD from MasterChef and then Remove liquidity tokenA=USDT, tokenB=BUSD USDT. transfer 312,399, BUSD 312,848. Then the hacker Flashloan repay 157,457 USDT and 157,683 BUSD. The next and last step was to transfer Profit 154,942 USDT and 155,165 BUSD to the hacker account.



Steps



The initial funds to launch the hack are withdrawn from TornadoCash. The result gains are swapped via PancakeSwap, and still stay in the hacker’s account (0x94bc1d555e63eea23fe7fdbf937ef3f9ac5fcf8f). We are actively monitoring this address for any movement.










BitRss.com shares this Contents always with License.

Thank you for Share!

   
Tumblr
LinkedIn
Reddit
VK

WhatsApp
Telegram

Cool to know huh? Read the full Article

Read the full Article:  ⭲ Metaverse Project Paraluni Hacked: Reportedly $1.7M Lost


Search about Crypto News


BITRSS | CRYPTOCURRENCY WORLD NEWS

The latest Top News, only from Leading exponents of BlockChain, Bitcoin and different Accredited Crypto Currency Sources.

Since 2015, our Mission was to Share, up-to-date, those News and Information we believe to represent in an Ethical and sincere manner the current Crypto Currencies World: everything you are looking for, in one place!

We have always tried to give priority to the News; for this reason we have designed BitRss.com simple and intuitive, usable by all Devices, fast and effective.


| LEARN MORE ABOUT |

Today Most Popular News



Dokky PRO - Bookcase Shop Script