Mirrora decentralized financial applications protocol built on the Terra blockchain classic allegedly mounted another attack. In fact, hackers can exploit a vulnerability in the Terra blockchain classic (LUC). This comes only a few days after the discovery of the latest exploit of the protocol with a loss of 90M dollars.
A second pirate for Mirror
The attacker apparently uses the price oracle to not match the old token MONDAY with the new LUNA token. The news of the exploit was spread by a member of the community Mirror who in spoke on the community forum Mirror.
The pricing oracle had a bug that told the system that MONDAY value about 5 UST when in fact it was worth microcents. An attacker was able to charge $1.3 million in collateral for $1,000 in MONDAYbut can borrow to withdraw real assets.
The mining basins mBTC, meth, mDOT and mGLXY have all been emptied. If the team Mirror does not solve the problem, the attacker could empty all the pools of mActive (for example, mSPY and mAAPL, mAMZNetc.)
The negligent behavior of the team Mirror Protocol is visible in its attack history. However, last week, fat man to my proof a list of attacks against the system.
Here is the address for your reading. https://t.co/7L9aeE38TF I was able to map this address to a Terra wallet via bridge tracing, and there were some large and interesting transactions, so I decided to dig. This is the Terra Wallet. https://t.co/zAtn6GfVil (8/12)
— FatMan (@FatManTerra) May 27, 2022
$90 million lost in previews
In October 2021, Mirror Protocol to offer 90 million dollars unintentionally channel on the old Earth. A feat that I completely ignored last week.
When users short sell stocks on the platform Mirrorthey must lock in their warranties, including TerraUSD (UST), MOON classic (LUNAC) and Mirror assets (mAssets) For at least 14 days. Once the transaction is completed, it is possible to release the guarantee for the money in the bag.
Generic ID numbers for smart entrepreneurs driving all business activities. However, a bug in the code caused thelock contract failure Mirror when a person used the same ID multiple times for portraits. This means that authors can withdraw funds without any permission.
In October 2021, an unconfirmed entity pointed out that they could unlock the hundreds of times more guarantees. This by using a set of duplicate identifiers. In total, the expenditures amounted to $90 million, according to available records.
To discover: The Central Bank of Russia plans to use cryptocurrencies for international payments.
