Platypus USD (USP) lost its dollar parity on Thursday following an apparent exploit that allowed a wallet to siphon off about $8.5 million from the token's liquidity pools, just weeks after Platypus DeFi issued the stablecoin.
The presumed hack was accomplished by means of a flash loan exploit, during which an attacker takes out an enormous loan and settles it in the same block, sandwiching transactions that use the capital to exploit other protocols in between. The Platypus swap function on the network has been disabled since the attack.
“There has been a flash-loan attack on USP," a pinned message in the official Platypus Telegram channel warns users. "We are currently trying to assess the situation and will communicate promptly on it. For now all operations are paused until we get more clarity.”
The alleged attacker appears to have taken out a $44 million flash loan from Aave V3, and in turn minted some 41 million US Platypus tokens. Next, the attacker cashed out some $8.5 million into other stablecoins, and paid back the flash loan. These actions all took place in the same block of transactions, on-chain data show.
“The vulnerability lies in the solvency checking in the function emergencyWithdraw of the MasterPlatypusV4 contract,” web3 security firm Certik told The Block.
“The solvency check doesn’t take into account the value of the user’s debt. It only checks whether the debt amount has reached the max limit,” Certik said. “After the solvency check passes, the contract allows the user to withdraw all deposited assets.”
The borrowing history of the attacker address.
With the pool’s liquidity drained in the previous block, the remaining 33 million tokens reside in attacker’s wallet, unable to be traded.
USP is now trading around $0.47 after dropping by just over 52%.
Chart data from CoinGecko.
PlatypusDefi did not immediately respond to a request for comment from The Block.
China's OTC cryptocurrency market has surged, with inflows exceeding $20 billion in each quarter of 2024, totaling $75.4 billion in nine months. Despite a strict ban on crypto trading, demand remains high, leading investors to use OTC services and peer-to-peer trading to access digital assets.
AnaisThe US DOJ has filed an antitrust lawsuit against Visa, accusing it of maintaining a debit payments monopoly. The DOJ claims Visa uses exclusivity agreements and penalties to stifle competition, forcing businesses to use its network while blocking new competitors from entering the market.
CatherineEasyA has partnered with the Web3 Foundation to launch the EasyA x Polkadot University, funded by a grant to provide workshops, hackathons, and grants aimed at fostering innovation within the Polkadot ecosystem. This initiative responds to the rising demand for Web3 professionals and seeks to educate the next generation of blockchain developers.
AnaisArchaeologists have discovered 303 new geoglyphs in the Nazca Lines of Peru using artificial intelligence, significantly enhancing the understanding of these ancient markings. This breakthrough highlights the potential of technology in archaeology, revealing new insights into the Nazca civilization and its mysterious creations.
AnaisAhead of the 26 September HMSTR token launch, Hamster Kombat announced plans for NFTs, new games, and less reliance on Telegram. By 2025, it aims to launch an NFT marketplace, host a clan championship, and start the second phase of its airdrop.
CatherinePayments giant PayPal now allows US merchants, except New York, to buy, hold, and sell crypto via their business accounts. This move expands PayPal's crypto accessibility, offering enhanced financial tools to millions of businesses.
KikyoSouth Korea is launching the Digital Asset User Protection Foundation to help users recover funds trapped in failed cryptocurrency exchanges, which have seen ten out of 22 platforms shut down. The foundation, expected to start operations in October, will coordinate with defunct exchanges to securely manage and return users' assets.
AnaisOpenAI is transitioning to a for-profit benefit corporation. Reports suggest that Sam Altman could receive a 7% equity stake, potentially valued at $10.5 billion. This prompts an important question: why are so many key insiders departing?
CatherineA Singapore court granted WazirX a four-month conditional moratorium after its July hack, which led to a $234 million loss. The exchange initially requested six months but received a shorter relief period under specific conditions to address its financial situation.
KikyoMeta is revamping its metaverse avatars with a major update launching on October 1st, allowing users to customize features like eye size and body types. Future updates will include AI-generated avatars and new options for fantasy characters, enhancing user experience in the metaverse.
Joy