The hacker who stole $7.4 million from the decentralized finance (DeFi) protocol Hundred Finance has started moving the crypto assets after a year of inactivity.
On May 1, the hacker moved Ether ETHUSD and Tether 
USDTUSD worth about $800,000 from Curve’s decentralized exchange (DEX) after providing liquidity on the platform more than one year ago.
After withdrawing the funds, the hacker converted USDT and other cryptocurrencies into ETH. This increased the exploiter’s ETH by more than $1 million.
The hacker currently holds a total of $4.3 million in assets in the wallet, which includes various crypto assets like Dai 
DAIUSD, Wrapped Ether, Frax and Wrapped Bitcoin.
On April 15, 2023, the DeFi protocol reported that it had suffered a security breach on the layer-2 network Optimism.
According to the blockchain security firm CertiK, the attacker manipulated the exchange rate between ERC-20 tokens and hTOKENS. This allowed them to withdraw more tokens than were deposited.
This is commonly known in the DeFi world as a flash loan attack. This type of attack vector usually involves borrowing large amounts of funds with some form of uncollateralized loan from a lending platform.
The attacker then uses the assets to manipulate the price of crypto on DeFi platforms. In the Hundred Finance hack, large loans were taken out under the falsified exchange rate.
In 2022, Hundred Finance also suffered an exploit on the Gnosis Chain. The protocol’s liquidity was drained through a reentrancy attack, resulting in a $6 million loss.
Credit: Source link