A legacy MakerDAO auction-keeper contract was exploited for over $500,000, with funds stemming from the 2020 Black Thursday crisis.
An old MakerDAO auction-keeper contract was targeted in an exploit totaling more than $500,000. The incident traces back to the Black Thursday event in March 2020.
CertiK's investigation details that the attacker managed to extract 200 ETH from a contract labelled a "legacy auction-keeper."
During the liquidation crisis on Black Thursday, that auction-keeper was among the first to secure ETH from MakerDAO via "zero bids". Four lots of 50 ETH each were never settled, and the hacker exploited that gap.
According to CertiK’s analysis “the root cause was a missing access control on function 0x8804d1de in keeper implementation 0x68399ed8aa33C5b43F863EE6782de492006A5546.”
Exploiting this, the attacker accessed the four outstanding lots of 50 ETH from the original Black Thursday crisis.
The funds were subsequently transferred in increments of 10 ETH via Tornado Cash.
The contract was not integral to the current Sky ecosystem, but it highlights the enduring nature of cryptocurrency risks. Even non-central contracts from years ago can remain attractive to attackers if they hold genuine value.
Share to
Disclaimer: this article comes from third-party media and is provided for reference only. It does not constitute investment advice. Crypto and other financial products carry significant price volatility risk, so please make your own decisions carefully.
Ethereum researcher Justin Drake proposes four steps to protect crypto wallets from AI-driven security risks, including moving funds to never-used addresses.
SecondFi opened recovery portal for $21M hack victims, offering 30 ADA for lost NFTs. Portal delayed multiple times.
A Charles Schwab survey finds 60% of crypto investors plan to increase holdings, outpacing other asset classes. One in five Americans own crypto.
Cardano's Midnight project was absent from the TOKEN2049 booth, drawing criticism from Charles Hoskinson who cited governance issues.