In a targeted exploit, decentralized exchange (DEX) aggregator and liquidity protocol KyberSwap, which serves as the main protocol in the Kyber Network’s liquidity hub, suffered a significant security breach. 
On November 23, 2023, KyberSwap was attacked, resulting in the theft of approximately $54.7 million, according to intelligence provided by the SlowMist Security Team. Now, more than seven days after the initial attack, the hacker has issued bold and audacious demands.
Critical Vulnerability In Liquidity Management System
The attack involved a series of meticulously planned steps. The attacker began by borrowing 2000 Wrapped Ether (WETH) through a flash loan from the AAVE protocol. 
With 6.8496 WETH, the attacker conducted a swap for frax Ether (frxETH) in the KyberSwap pool, intentionally causing the frxETH price to exceed the range of all liquidity providers’ positions. 
Subsequently, the attacker added liquidity of 0.006948 frxETH and 0.1078 WETH within a specified pric

Czytaj więcej

We współpracy z: https://bitcoinist.com/kyberswap-hacker-full-control-december-10-deadline/