- Copycat attacks on BNB Smart Chain (BSC) led to the theft of cryptocurrency valued at about $73,000.
- The attacks targeted BSC’s DeFi pools by taking use of flaws in the Vyper programming language used in some versions (0.2.15, 0.2.16, and 0.3.0).
- Attackers were able to repeatedly call a contract’s function and access cash without authorization thanks to a Vyper reentrancy lock flaw.
- Vyper is a protocol that was initially developed for the Ethereum Virtual Machine and is utilized in other blockchain systems’ protocols.
- White hat hackers, led by “c0ffebabe.eth,” stepped in to stop the attacks and recover the over $5 million in funds that had been taken.
- The ethical hacker protected the recovered assets by returning approximately 2,900 Ether to the DeFi protocol Curve.
The sheet updated. Losses have already ~$41m!https://t.co/lCaS4uEPzm https://t.co/stQYNJFS7y pic.twitter.com/P7jG8NHnV4
— BlockSec (@BlockSecTeam) July 30, 2023