Polkadot Treasury loses $1.38M due to exploited security flaw
Recently, Polkadot's Treasury suffered a loss of $1.38 million following a security breach that exploited a vulnerability in its code. This flaw had been identified and fixed by Parity Technologies in June, but it was not applied to the production systems before the attack occurred between October 24 and 26. This incident raises concerns about the security measures surrounding dotUSD, Polkadot's decentralized stablecoin, which launched in October.
The attack involved manipulating the cross-chain messaging system of the Polkadot Asset Hub, allowing the attacker to distort the supply of dotUSD without removing tokens from users' accounts. This led to artificial price discrepancies in the DOT/dotUSD liquidity pool, resulting in big losses for the Treasury, which was the sole liquidity provider.
While Parity confirmed that no users lost funds and that dotUSD remained fully backed by USDT, the incident shows vulnerabilities in the security processes of the network. Parity has stated that it will enhance its vulnerability assessments and monitoring systems to prevent similar occurrences in the future. The situation is a reminder of the ongoing risks associated with decentralized finance and the importance of solid security practices in the crypto space.
$DOT
#Security #CryptoNews
Recently, Polkadot's Treasury suffered a loss of $1.38 million following a security breach that exploited a vulnerability in its code. This flaw had been identified and fixed by Parity Technologies in June, but it was not applied to the production systems before the attack occurred between October 24 and 26. This incident raises concerns about the security measures surrounding dotUSD, Polkadot's decentralized stablecoin, which launched in October.
The attack involved manipulating the cross-chain messaging system of the Polkadot Asset Hub, allowing the attacker to distort the supply of dotUSD without removing tokens from users' accounts. This led to artificial price discrepancies in the DOT/dotUSD liquidity pool, resulting in big losses for the Treasury, which was the sole liquidity provider.
While Parity confirmed that no users lost funds and that dotUSD remained fully backed by USDT, the incident shows vulnerabilities in the security processes of the network. Parity has stated that it will enhance its vulnerability assessments and monitoring systems to prevent similar occurrences in the future. The situation is a reminder of the ongoing risks associated with decentralized finance and the importance of solid security practices in the crypto space.
$DOT
#Security #CryptoNews
