Hope Lend Protocol Hit by Major Hack, 526 ETH Stolen in Heist
In Brief
Hope Lend, the lending protocol of Hope.money, suffered a breach resulting in a loss of 526 ETH.
In a fresh blow to the DeFi world, the lending protocol Hope Lend, operating under Hope.money, faced a security breach leading to a theft of 526 ETH. According to crypto analyst Spreek, this isn’t a straightforward theft. It appears a hacker had identified a vulnerability in Hope Lend related to WBTC decimals and rounding, echoing a similar technique seen in a recent Wise Lending breach.
However, in a twist, before the original hacker could exploit the flaw, a second party, described as a “generalized frontrunner”, managed to outpace and beat them to the loot. After succeeding in the heist, the frontrunner then decided to share the stolen amount, essentially paying a ‘bribe’ of 263 ETH to the original attacker.
The Ethereum addresses of both culprits have been identified. 0x1f23eb80f0c16758e4a55d48097c343bd20be56f is the original attacker. 0xa8bbb3742f299b183190a9b079f1c0db8924145b is the frontrunner who succeeded.
Hope Lend exploited for 526 ETH. A generalized frontrunner beat the original attacker to the hack (which seems to be related to WBTC decimals and rounding, similar to the Wise Lending hack recently).
— Spreek (@spreekaway) October 18, 2023
They split the proceeds 50/50, paying a 263 ETH bribe. pic.twitter.com/IEGf3shjDb
Hope Lend Still Silent on the Impact
As the news spreads, many in the crypto community await an official response. However, as of this writing, Hope Lend’s official Twitter has provided no updates or reassurances.
Such incidents underscore the inherent risks in the decentralized finance world. While the technology holds immense promise, vulnerabilities still exist. Stakeholders must be vigilant, and platforms need to prioritize robust security checks to prevent such breaches in the future.
For users and investors, it’s crucial to stay updated and exercise caution when exploring new platforms or investment opportunities. Remember, always do your research and ensure you’re not inadvertently stepping into a minefield.
Disclaimer
In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, we suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice.
About The Author
Nik is an accomplished analyst and writer at Metaverse Post, specializing in delivering cutting-edge insights into the fast-paced world of technology, with a particular emphasis on AI/ML, XR, VR, on-chain analytics, and blockchain development. His articles engage and inform a diverse audience, helping them stay ahead of the technological curve. Possessing a Master's degree in Economics and Management, Nik has a solid grasp of the nuances of the business world and its intersection with emergent technologies.
More articles
Nik is an accomplished analyst and writer at Metaverse Post, specializing in delivering cutting-edge insights into the fast-paced world of technology, with a particular emphasis on AI/ML, XR, VR, on-chain analytics, and blockchain development. His articles engage and inform a diverse audience, helping them stay ahead of the technological curve. Possessing a Master's degree in Economics and Management, Nik has a solid grasp of the nuances of the business world and its intersection with emergent technologies.
