Impossible Finance Loses $500,000 in Latest DeFi Flash Loan Attack

Share Article
In Brief
  • Latest DeFi flash loan attack nets 230 ETH.

  • Copycat hacker made multiple swaps.

  • IF token price dumps 60%.

  • promo

    Gravity Dex Protocol: Bringing DeFi to Cosmos

The Trust Project is an international consortium of news organizations building standards of transparency.

The latest decentralized finance (DeFi) protocol to join the long list of exploited Binance Smart Chain projects is Impossible Finance.

Sponsored



Sponsored

Another day, another DeFi flash loan exploit on Binance Smart Chain. This time around, the victim is the multi-chain incubator project Impossible Finance.

According to a post on the project’s Twitter and Telegram feeds on June 21, there was a flash loan attack on Impossible Finance’s liquidity pool that resulted in a loss of around 230 ETH.

Sponsored



Sponsored

“Earlier today there was a flash loan attack on our IF token. We are working with PeckShield, Watchpug, and other community whitehats to investigate the situation and will have a detailed event report.”

Copycat DeFi Attacker

SushiSwap core developer Mudit Gupta noted that it was a similar attack to the one that exploited the BurgerSwap protocol in late May. Back then, the attacker managed to drain over $7 million from the protocol executing flash loans with a fake token.

Security firm WatchPug explained that the hacker made multiple swaps in a row at about the same price and drained the liquidity pool, adding “which is usually impossible” due to slippage.

A vulnerability in the pool’s smart contract enabled the attacker to perform multiple swaps of the protocols native token IF to BUSD and then to BNB to repay the flash loan.

The Impossible Finance team confirmed on Telegram that it had allocated an insurance fund to compensate liquidity providers,  

“We have also prepared an insurance fund to ensure that your funds are safe and remain our number one priority. All users funds who deposited into liquidity pools (“LPs”) PRIOR to the attack will be 100% compensated.”

Impossible Finance raised $7 million from an extensive list of venture capital and angel investors in early June in order to build a BSC incubator platform for multi-chain DeFi startups.

It joins the long list of BSC-based DeFi protocols that have been exploited this year which includes PancakeBunny, Cream Finance, bEarnBogged Finance, Uranium Finance, Meerkat Finance, SafeMoon, Spartan Protocol, and Belt Finance.

BSC itself claimed that the wave of attacks was organized and targeted.

IF token price tanks

The IF token has predictably collapsed today, tanking over 60% from a high of $2.80 this time on June 21 to as low as $0.14 before recovering to just over $1 at the time of press.

According to CoinGecko, IF is currently trading 86% lower than its June 19 all-time high of $7.61.

Disclaimer

All the information contained on our website is published in good faith and for general information purposes only. Any action the reader takes upon the information found on our website is strictly at their own risk.
Sponsored
Share Article

Martin has been covering the latest developments on cyber security and infotech for two decades. He has previous trading experience and has been actively covering the blockchain and crypto industry since 2017.

Follow Author

Market signals, studies and analysis! Join our Telegram Today!

Go

Market signals, studies and analysis! Join our Telegram Today!

Go

Market signals, studies and analysis! Join our Telegram Today!

Go