Breaking: Fei Protocol Exploited For $80 Mln, Funds Moved Into Tornado Cash

Ethereum-based DeFi exchange Fei Protocol lost about $80 million worth of tokens in an exploit on Saturday, on-chain data showed.
By Ambar Warrick
Updated July 19, 2022
Fei not the first DeFi hack this week

Ethereum-based DeFi exchange Fei Protocol lost about $80 million worth of tokens in an exploit on Saturday, on-chain data showed. The protocol offered the hacker a $10 million bounty to return the stolen funds.

In a series of transactions, the attacker appeared to have moved  about $80 million of Wrapped Ethereum from the protocol, and into their personal wallet. The hacker now appears to be laundering the stolen funds into mixer Tornado Cash, where they are bound to become untraceable.

Multiple liquidity pools belonging to Rari Capital and Fei appeared to be the target of the attack.

Fei is an Ethereum-based protocol that uses tokenomics to maintain the 1:1 dollar peg for its stablecoin Fei USD. But the news of the hack appears to have destabilized the stablecoin, which is now trading at $0.986, according to data from Coinmarketcap.

Fei’s governance token, $TRIBE, plummeted 10% in minutes after the attack.

Advertisement
Advertisement

Fei Protocol offers $10 mln bounty

On its official twitter handle, the DeFi protocol acknowledged the hack, and offered the exploiter a $10 million bounty to return the funds.

We have identified the root cause and paused all borrowing to mitigate further damage. To the exploiter, please accept a $10m bounty and no questions asked if you return the remaining user funds.

@feiprotocol

But given that the funds are already being moved into a token mixer, it seems unlikely that such a scenario will play out.

Crypto security firm Blocksec said the cause of the exploit is due to a typical “reentrancy vulnerability,” a common vulnerability in Ethereum-based smart contracts.

A similar exploit was used in the now-infamous DAO Hack of 2016 to steal over $70 million worth of tokens.

Advertisement
Advertisement

A bad week for DeFi?

This week has seen a string of exploits and hacks in the DeFi space, with a total of over $100 million in tokens being stolen. Earlier on Saturday, Ethereum-based DeFi protocol Saddle Finance was exploited to steal over $10 million.

Fantom-based Deus Protocol lost $13 million earlier this week. The perpetrators of these attacks are unknown.

But the U.S. government had recently warned that a notorious North Korean hacking group, called Lazarus, is turning its sights on DeFi protocols. The group is behind the record-breaking Axie Infinity hack, which saw over $600 million stolen.

Advertisement
Ambar Warrick
With more than five years of experience covering global financial markets, Ambar intends to leverage this knowledge towards the rapidly expanding world of crypto and DeFi. His interest lies chiefly in finding how geopolitical developments can impact crypto markets, and what that could mean for your bitcoin holdings. When he isn't trawling through the web for the latest breaking news, you can find him playing videogames or watching Seinfeld reruns. You can reach him at [email protected]
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.