Exploiter Drains $9.5M in reUSD via Interest Rate Inflation Bug
共有する
A significant security breach has occurred involving an interest rate inflation bug, allowing an attacker to exploit a vulnerability in a new vault's Controller contract. By donating to the contract, the attacker triggered a price inflation, causing the exchange rate to drop to zero and bypassing collateral verification. This enabled the attacker to borrow a substantial amount of reUSD with just 1 wei of collateral. The stolen funds, now converted to ETH, are valued at approximately $9.5 million. The attacker's gas fees were traced back to Tornado Cash. Security teams, including SlowMist and MistTrack, are monitoring the situation closely as ResupplyFi, the affected project, formulates a response to the crisis.