Welcome!

By registering with us, you'll be able to discuss, share and private message with other members of our community.

SignUp Now!
adv ex on 5 january 2024
adv ex on 22 February 2024
banner Expire 26 October 2024
Rescator cvv and dump shop
banner expire at 13 May

Yale lodge shop
UniCvv
banner Expire 1 April  2021

Hacker stole more $ 100 million from the Mango Markets DeFi Platform

ALBERT

TRUSTED VENDOR
Staff member
Joined
Dec 3, 2020
Messages
1,353
Unknown deduced digital assets worth about $ 116 million from the Mango Markets trading and credit platform based on Solana.


cd225150cc.jpg




The attacker used a deposit of 5 million USDC to manipulate the price of MNGO's native token by opening a large margin in unlimited swaps. Due to the low liquidity in the spot market, the asset price jumped from $ 0.038 to $ 0.91 — by about 2295% on time%.


0fcc9f9be3.jpg




The increase in the value of collateral in MNGO allowed the hacker to borrow and withdraw funds from the protocol in several coins.


80d2bdbc15.jpg





« We are currently investigating an incident in which a hacker withdrew funds from Mango by manipulating oracle prices », — the project team wrote.

586edc298f.jpg




Over the day, the price of MNGO token fell by more than 43% — to $ 0.022 ( CoinGecko ). According to DeFi Llama, the cost of funds blocked in the protocol fell to $ 200.



« It was not an attack by oracle manipulation, but rather a classic pump & dump. The oldest risk in the history of combined lending protocols. The price of MNGO went beyond the legitimate $ 0.3 for a couple of minutes. The oracle worked accurately, just bad risk parameters », — An analyst commented on the incident under the nickname foobar.

a59c68482d.jpg




The Mango team confirmed that the oracle worked « as they should have ».


51a3f31831.jpg




Recall that in the third quarter of 2022, losses of the Web3 ecosystem from hacks and fraud amounted to $ 428.7 million.

Of the total indicator for hacker attacks, $ 399 million came. Most of the losses were brought by two incidents — with the Nomad cross-protocol ( $ 190 million ) and the Wintermute marketer ( $ 160 million ).
 
Top Bottom