DeFi lending protocol Inertia has reported a recent exploit that resulted in the loss of approximately $152,000 across multiple lending markets. The attack exploited a known vulnerability in the ERC4626 standard, allowing attackers to manipulate the price of roETH collateral and borrow assets from five Inertia lending markets. The affected markets included USDC, INIT, sINIT, TIA, and roTIA, with the attack lasting just over an hour.
Inertia's post-mortem revealed that attackers reduced the circulating supply of roETH by 99.7% and manipulated the exchange rate by transferring wstETH directly into the contract. This inflated the reported value of roETH from 1.234 stETH per token to nearly 33.75 stETH, enabling the attackers to drain assets. The protocol admitted that its oracle safeguards failed to prevent the exploit due to a lack of price deviation controls and secondary oracle validation.
In response, Inertia has restored affected user balances through its Insurance Fund and resumed lending operations. The protocol plans to enhance its risk management by overhauling its oracle architecture and collateral review framework, introducing multi-source oracle validation, and implementing stricter monitoring of liquid staking collateral assets.
Inertia Exploit Exposes ERC4626 Vulnerabilities, Drains $152,000
면책 조항: Phemex 뉴스에서 제공하는 콘텐츠는 정보 제공 목적으로만 제공됩니다. 제3자 기사에서 출처를 얻은 정보의 품질, 정확성 또는 완전성을 보장하지 않습니다.이 페이지의 콘텐츠는 재무 또는 투자 조언이 아닙니다.투자 결정을 내리기 전에 반드시 스스로 조사하고 자격을 갖춘 재무 전문가와 상담하시기 바랍니다.
