Skip to content

Latest commit

 

History

History
119 lines (89 loc) · 6.28 KB

terraport.md

File metadata and controls

119 lines (89 loc) · 6.28 KB
Raw

Terraport

Date:: April 10th, 2023

Amount Stolen: $3,900,000

Tags:: 💼 IT Workers?

Details

Terraport Finance is a defi project built on, believe it or not, the Terra blockchain. Yes, the same Terra blockchain on which the Terra/Luna projects were built. Despite the massive collapse of the flagship project in May 2022, there are still a number of Terra projects operating, and even some new projects being developed.

Terraport Finance launched on March 31, apparently having gone live without any sort of audit. On April 10, Terraport disclosed that an attacker had apparently managed to drain all project liquidity pools, making off with assets priced at around $2 million.

On the morning of April 10th, Terraport was exploited resulting in losses of approximately 4 million USD in Terra, LUNC, and USTC tokens.

The hack was made possible due to a mathematical weakness in the algorithm used to calculate LP prices. The malicious actor added a minor amount of liquidity to the protocol and then manipulated the LP share price, allowing them to withdraw a large amount of liquidity.

Two pools were affected, the first one drained for 9,148,426 TERRA ($1.8 million) and 15,100,861,997 LUNC ($1.88 million), and the second one for 576,736 TERRA ($115K) and 5,487,381 USTC ($117K). The total losses amount to about $4 million USD.

Attacker(s) drained all of the liquidity pools on Terraport, a newly-launched decentralized exchange platform

The attacker(s) stole the funds in two transactions, in total withdrawing 9.7 million TERRA (Terraport’s native token) tokens, 15 billion Luna Classic (LUNC) tokens and 5.5 million of the Terra Classic USD stablecoin (USTC) tokens.

A wallet involved in the Terraport launch was found to have made a series of suspicious changes to the code of three important smart contracts related to the liquidity pools, several hours before the heist was effected.

On-Chain

terra19yrq0mehjfk5cquxn4svjxft4rmhcc9g8t0yma - Exploited Address

terra1z5luj6qdtclnt5jnjkrtnlj9zankf654638dq2 - Exploited Address

Added liquidity:

Remove liquidity:

Laundry:

  • 0x011eee585bd974e6cb40e7c871f193ee6de9bc9b - Original Laundry List
  • 0x02fb2598fcbab99de526aff589d5a02a67e10712 - Original Laundry List
  • 0x0b2ad4d9c39bfdca0611c153b5930b4c3021dce5 - Original Laundry List
  • 0xc52e93cff85e36af14c4a16fd0d766ff3052165b - Original Laundry List
  • 0x1062d547c92dff88352796985de62e22c7e5aa35 - Original Laundry List
  • 0x3465c605198bffa5677b88a4dd42fc2706f56b14 - Original Laundry List
  • 0x3a03013ce66514bdc89d4464755049a629399b7a - Original Laundry List
  • 0x3cf36126d91fece3ec2e0c5037ab6c0962c9962f - Original Laundry List
  • 0x6bc6dcc1a742cf7887c47888b7bcc4a6954394bf - Original Laundry List
  • 0x460bb28253e16bbeae9151e5f8380dfc643758e5 - Original Laundry List
  • 0x4ce4791999b498cc50334ec4f978e07b57409e24 - Original Laundry List
  • 0x4ea4e80e53adf5b1193ee75fd06967b878feb62e - Original Laundry List
  • 0x67d079f20031234bd542f4e82cfe6383a1b68269 - Original Laundry List
  • 0x6cf8f69f60fcb0c55601ab53a0aa20e96717ae79 - Original Laundry List
  • 0x88c19562f6f9a7dc1625ea610b45518da6992c4e - Original Laundry List
  • 0x8e9028797d4f57b55de9d7fdc490214db251acd5 - Original Laundry List
  • 0x90bb71cfc9f1b1f5c64b2bf3a690042a6cfaec72 - Original Laundry List
  • 0x9be33a9d3cda48a6e8e5114c81d07e258bd572d3 - Original Laundry List
  • 0x9f220512e7fa5b829a0d357e158eb4b4337c24af - Original Laundry List
  • 0xa7def06d03708fe2a3966a5830977bf21ed61452 - Original Laundry List
  • 0xaadc985f07971aa4494615c69176fefe703d1698 - Original Laundry List
  • 0xc2a34141b62de53898cae0d64b783c5d7bd756b6 - Original Laundry List
  • 0xc4cb77f34334e815cb5b80ebfe09c72ed5d098bf - Original Laundry List
  • 0xd738e5e2b64b3446abd341e0a097a50ab2f305d6 - Original Laundry List
  • 0xe2d88258757f792cd0e9c88536599c60443f2b3d - Original Laundry List
  • 0xe7c0ccdbe4a7bdf8ab7cb02b6213eb6e073acc98 - Original Laundry List
  • 0xe84f4886ccf473846ea84e67c8cb35affc2aee3e - Original Laundry List
  • 0xef94def70a403dede49451cb01b3bd8a82961c34 - Original Laundry List
  • 0xf69e377afa64bc9351a24c6c213732ef9ee6374c - Original Laundry List
  • 0x8dd0d6698053743a969f625f3b95cb620614d83f
  • 0xdae85cd56abc1a6056f2f9244469b1727a2141e3
  • 0x556a6719c2efbca3bfbff6daa81eb8d5fd251d07
  • 0xcfa8afffa112fbb8bd3010a8560b0092cb1e3158
  • 0x85d207d3bbc69999be81aa29ec6a04fc52f89d37
  • 0xd717807d88eb3fc3b5cb90ec1f511b9a438addb9
  • 0xdc976ee125c050cc0f6c59b3715111774fde1a51
  • 0x1f7428bce01ae75c6eaf2eeb7f1ffafc664ee55e
  • 0x979c2a6048df4cd9ca19e9978506b0317cc5e0da
  • 0x626d403cc15b8ff2a72bfe6ce4b85ee67321500e
  • 0x40cefc415cf61ef3e8312a8548aa4161cac3754d
  • 0x05a0cf9710483de7a15268c214970d834c6c8587
  • 0xc284e4e7c881d54c4831091bd5132ee28ee5593e
  • 0x62d213f39848e279cc5ac29a35481035e8e06bec
  • 0x97900e159e75f1e06ff351b6ef1d488c79154cdd
  • 0x4cfcaf6106464590b32d8484b38f8cf649a7959d
  • 0xe4d82de38213b4caff238bd1fac0ce9f8712c8ed
  • 0x03932f934b1a024aa450dd9a59c34674a0622203
  • 0xbd921afab227b1fb11d217e2ba154b16c176cd32
  • 0xe582daf91b4ddd4ab681e4261f3851694a63f8bf
  • 0x618949722f5d2efc4f2cc08d57377177a7849db6
  • 0x84d472b436e7e5c3ea21a8ee74dc82d07bbc795f
  • 0xf9168fd5fe67ac1c2f6b9ccdc6ddd7c92bb9e4b3
  • 0xec306e73a2d8a5a16f894bdb325f1a08fbf58d41
  • 0xbc12e19658b8b67cea0a76508c88ddde38019f23
  • 0xa0b997302e6d7163140c1b322bcd229e3abde618
  • 0x25866ffd015d74761f286a716f1c192a551077d6
  • 0x6a3f429e7296ebf293f7e8a9e337ed883836d69e
  • 0xff89203c5aef1301fced897b98500d62469a0d8f
  • 0x3b8b491c578928d8ee86b0a57fa1f1de5d8a0dff
  • 0x6bf5de13b45125a322242df046966233174009f8

URLs