Solana-based DeFi platform hacked in a $100 Million Exploit, Here’s the Details

Bhushan Akolkar
October 12, 2022
Why Trust CoinGape
CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journal analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.

Solana-based decentralized finance (DeFi) protocol Mango Markets has been the victim of the hack in the latest exploit. As per the details, the attacker has managed to drain more than $100 million from the DeFi protocol.

As per the details provided by the blockchain auditing website OtterSec, the attacker managed to get a large number of loans from the Mango Treasury by manipulating the DeFi protocol’s collateral. This resulted in a massive loss of funds from the Mango Treasury.

Mago Markets is a Solana-based DeFi platform that trades digital assets for spot margin and trading perpetual futures. Mango’s decentralized autonomous organization (DAO) manages the overall governance of the Mango Markets. The DeFi protocol has taken immediate cognizance of the matter noting:

We are currently investigating an incident where a hacker was able to drain funds from Mango via an oracle price manipulation. We are taking steps to have third parties freeze funds in flight. We will be disabling deposits on the front end as a precaution and will keep you updated as the situation evolves.

Mango Markets has asked its users not to make any fresh deposits until the situation is clear. Furthermore, it is reaching out to the attacker for the return of the funds while offering some bug bounty.

The Exploit of Mango Markets

Joshua Lim, the Head of Derivatives at Genesis Global Trading, has provided further details into how the hacker orchestrated the hack. He writes:

  1. At 6:19 PM ET, attacker funded acct A (CQvKS…) with 5mm USDC collateral.
  2. The attacker then offered out 483mm units of MNGO perps on the order book.
  3. At 6:24 PM ET, attacker funded acct B (4ND8F…) with 5mm USDC collateral to buy those 483mm units of MNGO perps, at a price of $0.0382 per unit.
  4. At 6:26 PM ET, attacker started to move the price of MNGO spot mkt, it traded as high as $0.91.
  5. At MNGO/USD price of $0.91 per unit, account B was in the money by 483mm * ($0.91 – $0.03298) = $423mm.

With this P&L, the attacker then took out $116 million in loans across all tokens. Joshua writes that the attacker wiped out all liquidity on Mango.

Advertisement
coingape google news coingape google news
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.

Why Trust CoinGape

CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights Read more…to our readers. Our journal analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.

About Author
About Author
Bhushan is a seasoned crypto writer with over eight years of experience spanning more than 10,000 contributions across multiple platforms like CoinGape, CoinSpeaker, Bitcoinist, Crypto News Flash, and others. Being a Fintech enthusiast, he loves reporting across Crypto, Blockchain, DeFi, Global Macros with a keen understanding in financial markets. 

He is committed to continuous learning and stays motivated by sharing the knowledge he acquires. In his free time, Bhushan enjoys reading thriller fiction novels and occasionally explores his culinary skills. Bhushan has a bachelors degree in electronics engineering, however, his interest in finance and economics drives him to crypto and blockchain.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.