acryptos

ACryptoS announced on November 9 that 77 vaults across 5 chains had been attacked, resulting in losses of about $665,000. Deposits have been disabled, but withdrawals remain available. The team has stopped maintaining the protocol and urged users to withdraw their funds as soon as possible.

According to DefiLlama data, the protocol’s TVL peaked at about $482 million in 2021, but has recently fallen to around $10.53 million. The attack was not particularly sophisticated: a post-mortem by the team said the vaults lacked input validation, allowing an attacker to deposit a tiny amount of a single token and mint nearly all of the shares.

The loss is not especially large by DeFi standards, but it was enough to shut down an already-shrunken veteran protocol: the team said it lacked the resources to continue maintaining it. The stolen funds have been moved through multiple cross-chain protocols. The attacker can keep a 10% bounty as a condition for returning the funds. Withdrawals are still open, but how much users can redeem depends on what remains on-chain.

#DeFi安全 #ACryptoS #VaultAttack