We are collaborating with ecosystem partners to trace and recover funds where possible.” Source: KiloEXA bounty program and a full report on how the exploit occurred is also in the works, according to KiloEX. In an update, the KiloEX team said it was collaborating with BNB Chain, Manta Network, and cybersecurity firms Seal-911, SlowMist and Sherlock in an effort spanning “multiple ecosystems.” “Our investigation has confirmed that the stolen assets are currently being routed through zkBridge and Meson,” KiloEX said. “We are urgently attempting to engage with both protocols to halt ongoing transactions and prevent additional losses.” KiloEX attacker exploited price oracle issue, say analysts Cybersecurity firm PeckShield said in an April 14 post to X the exploiter looted $7.5 million in total, $3.3 million Base, $3.1m opBNB and $1m BSC. The firm has speculated the exploit is likely a “price oracle issue,” where the information used by a smart contract to determine the price of an asset is manipulated or inaccurate, leading to the exploit. “Our initial analysis on one transaction exploit indicates a price oracle issue,” PeckShield said. Source: PeckShield“The hacker exploits it to create a new position with initial given ETH/USD price of 100 and then immediately close the position with inflated ETH/USD price of 10000, netting the $3.12m profit in one single transaction.” Chaofan Shou, co-founder of blockchain analytics firm Fuzzland, also weighed in, speculating the exploit was likely due to a price oracle issue.“Anyone can change the Kilo’s price oracle.
Decentralized exchange KiloEX has confirmed it has suspended usage of its platform and is tracing stolen funds after suffering a $7.5 million exploit. The exploit has been contained, with use of the platform suspended and an investigation underway, the KiloEX team said in an April 14 statement to X.“The team has immediately suspended platform usage and is working with security partners to trace the flow of funds,” KiloEX said. “We are analyzing the attack vector and affected assets.
They did verify that the caller shall be a trusted forwarder, though, but didn’t verify the forwarded caller,” Shou said. Shou added it was a “very simple vulnerability” when a user asked about the complexity of the exploit. Source: Chaofan ShouThe news has sent the KiloEX’s native token, Kilo, plunging over 27% to trade at $0.03596, according to CoinGecko.
or
Share This Story
Article Details
Author / Journalist: Cointelegraph by Stephen Katte
The story "Decentralized exchange KiloEx says $7.5M exploit has been contained" has 532 words across 19 sentences, which will take approximately 3 - 5 minutes for the average person to read.
Which news outlet covered this story?
The story "Decentralized exchange KiloEx says $7.5M exploit has been contained" was covered 1 days ago by Coin Telegraph, a news publisher based in United States.
How trustworthy is 'Coin Telegraph' news outlet?
Coin Telegraph is a fully independent (privately-owned) news outlet established in 2013 that covers mostly crypto news.
The outlet is headquartered in United States and publishes an average of 29 news stories per day.
It's most recent story was published 7 hours ago.
What do people currently think of this news story?
The sentiment for this story is currently Negative, indicating that people regard this as "bad news".
How do I report this news for inaccuracy?
You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.
