Osmosis, a decentralized exchange built using קאָסמאָסSDK, has been exploited, draining its liquidity pools for approximately $5 million.
Developers have halted the Osmosis blockchain to prevent further damage.
The decentralized exchange was stopped at roughly 10:49 pm EST today at a block height of 4,713,064, according to an מעלדן from Mintscan, an Osmosis block explorer.
די גווורע happened just two blocks before the halt.
“Liquidity pools were NOT completely drained,” tweeted the team after discovering the exploit. “דעווס פיקסיר דעם זשוק, סקאָפּינג די גרייס פון לאָססעס (מיסטאָמע אין די קייט פון ~ $ 5M), און ארבעטן אויף אָפּזוך."
ליקווידיטי פּאָאָלס זענען נישט "גאָר ויסגעשעפּט".
דעווס פיקסיר דעם זשוק, סקאָפּינג די גרייס פון לאָססעס (מיסטאָמע אין די קייט פון ~ $ 5M), און ארבעטן אויף אָפּזוך.
A user on Reddit געווארנט the Osmosis developers about the critical bug in their decentralized exchange. The Reddit thread was later removed by the Osmosis moderator.
According to the user, if you provide liquidity to liquidity pools, you would then be able to withdraw 50% more than your deposit without any bonding period (a period over which the funds are locked).
On-chain transactions show how one באַניצער repeatedly exploited this precise bug.
זיי אנגעהויבן the exploit with just 26 OSMO tokens and made 13 מער OSMO tokens in their first transaction.
One instance shows how they were able to provide liquidity of 101,230 OSMO (the native token of Osmosis) in a מאַסע - מאַטן made six hours ago.
Transaction showing user adding liquidity. Source: מינטסקאַן.
Then, just 30 seconds later, the exploiter ארויסגעגאנגען their position with 151,084 OSMO tokens, pocketing 50% profit.
Transaction showing user removing liquidity. Source: מינטסקאַן.
They then repeated this process at least 30 times, each time increasing his holdings by 50%.
The wallet raked in roughly 70,000 of Cosmos’ native ATOM tokens out of the process (by swapping OSMO to ATOM), which is valued at approximately $600,000. They also transferred some of their OSMO profits to אן אנדער אַדרעס to repeat the same process.
The user repeated the process with numerous accounts. All told, the attacker made roughly $5 million from this bug.
Osmosis token price action
The total value locked (TVL) on the Osmosis blockchain dropped 1% over the past 24 hours. TVL currently stands at $212.77 million, according to data from דעפילאַמאַ.
OSMO is down 6.58% over the past day and trades at $1.07.
The native token hit an all-time high of $11.21 in March 2022, according to data from קאָונמאַרקעטקאַפּ. It has since shed over 90% from that high in the last three months.
ווילן צו זיין אַ קריפּטאָ מומחה? באַקומען די בעסטער פון דעקריפּט גלייך צו דיין ינבאָקס.
