Orhan 
Hack incidents in the DeFi ecosystem show no signs of stopping. In a recent attack on the Base blockchain, approximately $1 million in funds was stolen. This latest security breach resulted from an exploit of unverified lending contracts on the Base blockchain, allowing attackers to manipulate the system and steal around $1 million. Such attacks highlight the need for stronger security measures, particularly against price manipulation on decentralized platforms.
Background of the Attack
On October 25, 2023, blockchain security firm Cyvers Alerts reported an attack on the Base blockchain. This incident occurred through a vulnerability in a smart contract related to Wrapped Ether (WETH). The attackers exploited weaknesses in oracle services to manipulate prices, stealing approximately $993,534 in funds. They transferred a significant portion of the funds to the Ethereum network and then funneled $202,549 through the privacy-focused Tornado Cash platform, later stealing an additional $455,127 using the same method.
Price Manipulations
The primary method used in this attack involved exposing a weak oracle to price fluctuations. Oracles, tools used to provide external data to the blockchain, are commonly used in decentralized finance (DeFi) projects. When oracles rely on low-liquidity and unreliable trading pairs, they become vulnerable to price manipulation. Cyvers’ senior SOC leader, Hakan Ünal, explained that the oracle in question depended on a pair with limited liquidity, which made manipulation easier.
Oracle manipulations pose a critical threat in the DeFi ecosystem. Ensuring the secure verification of oracles is essential to protect users’ funds. This attack underscores the need for DeFi projects to strengthen and secure their oracle solutions.
Expert Recommendations for DeFi
Cyvers noted that such attacks occur due to the use of unverified lending contracts. To prevent these attacks, they recommend using oracles with higher liquidity. Additionally, enhancing oracle diversity and security is an important step toward preventing similar price manipulations. The reliability of oracles will be a crucial factor for the future growth of DeFi platforms.
Security Protocols
This attack highlights the need for DeFi platforms to address security vulnerabilities. Strengthening oracle reliability and verifying lending contracts are critical steps to prevent such attacks. Unverified lending contracts weaken the system’s security, posing a significant risk to user funds in the DeFi ecosystem.
While the attacker’s identity remains unknown, the responsibility falls on organizations managing unverified lending contracts and those making insecure oracle selections. This attack emphasizes that DeFi projects need to adopt not only a growth-oriented but also a security-focused approach. Projects offering more reliable and diversified oracle solutions, such as Chainlink, can play an essential role in preventing such attacks.
The Need for Security
To ensure continued growth in the DeFi space, proactive measures must be taken against security vulnerabilities. Protecting user funds, correctly configuring oracles, and implementing robust security protocols are vital for the sustainability of DeFi projects. This incident serves as a reminder that enhanced security measures are crucial for the continued development of DeFi.
You can join our Telegram channel to not miss the news and stay informed about the crypto world.