Skip to main content

Terra: Mirror Protocol could collapse due to a new exploit

 


Terra 's Mirror Protocol was the victim of an attack in which the perpetrators stole $2 million. The exploit remains unpatched and could get even worse in the coming hours.


Terra 's Mirror Protocol was the target of another cyber attack yesterday. Users report that the attackers have already looted more than $2 million worth of various assets. Affected assets include mBTC, mETH, mDOT, and mGLXY. MirrorUser was the first to notice the attack.


FatMan is part of the Terra Research Forum, which has been posting analysis and updates on the Terra collapse over the past few weeks. FatMan assumes that there is an error in the pricing oracle. This tells the system that the asset is "worth around $5, even though the actual price is less than a microcent." Accordingly, “for $1,000 worth of LUNC, an attacker can now load $1.3 million in collateral and then pull out real-world assets of that value.”


FatMan also provided an example of the transaction on the Terra Finder website . He expects the situation to get even worse once the market opens. The attackers could then pull all assets from the pools, including those tied to stocks like mAAPL and mAMZN.


The Mirror Protocol team has not yet commented on the issue. FatMan is concerned that this behavior will only make the situation worse as time is running out to fix the vulnerability. He asked both the development team and Do Kwon to fix the issue:


“Mirror will accumulate bad debts and the system will collapse. Now is not the time to be careless."


User Todd G explained how the problem can be fixed: by updating the pricing oracle. Terra needs to resolve the situation quickly before things get any worse.

Terra is up to its neck in water

It seems FatMan has already given up hope: "It looks like nothing is going to happen and so the project will surely collapse tomorrow." FatMan also said there are other vectors and urged users to withdraw their money from the project.


After a dramatic crash , the exploit is now the final nail in Terra 's coffin . The last thing the project needed was an attack. This could end the last hopes left with the release of Terra 2.0 .


It is not yet clear how high the loss from this attack will be. However, it is already clear that the image damage is enormous. Investigations are already underway against the Terra staff and Do Kwon and this incident will not make the situation any easier.


Disclaimer

All information contained on our website has been researched to the best of our knowledge and belief. The journalistic contributions are for general information purposes only. Any action taken by the reader based on the information found on our website is entirely at their own risk.

My Top Picks
Honeygain - Passive earner that pays in BTC or PayPal
MandalaExchange -The Best no KYC crypto Exchange! 
Clash Of Streamers - Earn Crypto while Playing all for Free! - Play smart!
Pipeflare - Faucet that pays in ZCash and Matic, Games pay in DAI
Womplay - Mobile dApp gaming platform that rewards in EOS and Bitcoin
Cointiply - The #1 Crypto Earning Site
Torum - Join the latest Social Network and earn TRM for Free! 
LiteCoinPay - The #1 FaucetPay earner for Litecoin 
LBRY/Odysee - YouTube Alternative that lets you earn Money by viewing videos!
FaucetPay - The #1 Microwallet Platform
FREEBTC - The #1 FaucetPay earner for Satoshi's
FaucetCrypto - An earning/faucet site that pays out instantly
FireFaucet - An earning site that pays better for some than Cointiply
DogeFaucet - Dogecoin Faucet
xFaucet - BTC, ETH, LTC, Doge, Dash, Tron, DGB, BCH, BNB, ZEC, FEY - Claim every 5 minutes
Konstantinova - BTC, ETH, LTC, Doge, Dash, Tron, DGB, BNB, ZEC, USDT, FEY, 25 Claims Daily

Comments

Popular posts from this blog

From offchain to offchain: Statechains meets Lightning

  Without a doubt, the most significant off-chain Bitcoin solution is the Lightning network. But in its wake, the statechain has emerged as an intriguing replacement. There is currently a proposal to link the two offchain networks. From an ocean, for example, you can see sunbeams glistening in the water, waves rippling, and possibly a jellyfish drifting toward the light. But you only see a small portion of it. The distance from the sea's surface to its bottom is hundreds of meters. It has dozens of different fish species swimming in it, crabs and starfish crawling on the bottom, shells clinging to rocks, and sea plants climbing up. A completely new world starts where your gaze diverges. You can picture a blockchain like Bitcoin, just like the sea. What you see on the outside is only a small portion of what is actually there; the set of UTXOs (coins) and transaction history that full nodes store are just the beginning of a much larger world. It's the plan, at least. With Bitcoin

MSP Recovery and Tokenology aim to optimize healthcare with the help of Polygon

  MSP Recovery LLC, a Miami, US-based healthcare provider with an estimated enterprise value of $32.6 billion, is partnering with Web3 company Tokenology to jointly launch a new blockchain platform called Lifechain. Lifechain wants to leverage the verifiable and transparent nature of blockchain technology to aggregate medical care claims, medical expense reports and patient data and streamline their processing. For this purpose, MSP Recovery launched its own LifeWallet in January, which already has 1 million users. In addition to the wallet and blockchain platform, an associated crypto token called LifeCoin is also used. The press release explains that the primary purpose of the system is to enable secondary healthcare providers to more effectively bill health insurance companies for their costs. “The number of medical claims tokenized going forward will surpass $50 million per day by 2024. For this we need scalability, security and sustainability, which we have only found with Polygon

Phishing attack on popular crypto sites tries to empty wallets

  Several major crypto sites such as Etherscan, CoinGecko, DeFi Pulse, and others report malicious pop-ups scammers use to try to trick users into connecting their MetaMask wallets. The phishing attack came from a domain displaying the Bored Ape Yacht Club (BAYC) logo. "We are investigating the root cause of this attack to fix the threat as soon as possible," CoinGecko founder Bobby Ong tweeted. The phishing attack appears to have been triggered by a malicious ad script from Coinzilla, a crypto ad network, according to CoinGecko. Etherscan also advises its users not to confirm any transactions that may appear on the website. The attackers attempted to use the hype around the “bored monkeys” non-fungible tokens (NFT) to gain access to the cryptocurrencies of unsuspecting website visitors. Although the websites affected by the scam attempt have reacted in the last few hours and deactivated the advertising pop-up, it is still recommended not to connect your MetaMask wallet to ne