- WOOFi has seen an increase in malicious activity following a recent exploit of a flash loan.
- Just hours after the exploit was discovered, an impersonator X redirected users to a phishing site.
After falling victim to malicious actors, the WOOFi decentralized cross-chain exchange was launched on Arbitrum [ARB]A flash loan scam of $8 million has been perpetrated on.
WOOFI gets attacked
A flash loan is an attack that occurs in the decentralized finance space (DeFi), where a hacker exploits flash loans’ unique features to manipulate the market. financial system.
Flash loans are a way for users to borrow large amounts of money without requiring collateral as long as they return the amount borrowed within the same transaction block.
The attacker will then use these borrowed funds in order to manipulate prices, or exploit vulnerabilities of decentralized protocols like decentralized lending platforms or exchanges. The attacker aims to create a temporary imbalance in the market or manipulate prices.
After the exploit has been successfully executed within a single block of transactions, the attacker pays back the flash loan and leaves no collateral behind.
During an ongoing investigation by WOOFi it was revealed the hacker had exploited a particular oracle on Arbitrum that affected the WooPPV2 Contract.
The attacker executed a “contained” Flash loan attack on WOO’s price. The flash loan was strategically repaid during a price drop of the underlying asset.
After receiving initial alerts via Twitter accounts Spreek, and PeckShield the Woo team immediately halted their pools and began a thorough investigation. At the moment, the attacker is believed to have managed to siphon off approximately 2,000 Ethereum.
Source: X
Malicious attackers can be found in work
The DEX project has confirmed that users’ assets are safe in Earn vaults and WOOFi. stakeOr other WOO contracts.
Even though facing financial WOOFi has now been hit by additional malicious actors trying to exploit WOOFi users who are unaware of their existence on X.
Two hours after the attack, the WOOFi Team issued a warning to users, warning them about a fake account impersonating the official handle for the project.
Here’s a list of realistic and not-so-realistic images. ARB market cap in BTC’s terms
Arbitrum: The public’s opinion[ARB] The network on which the attack occurred remained neutral.
ARB token, which is associated with the ARB network, also saw no significant corrections in its price.
Source: Santiment
“This article is not financial advice.”
“Always do your own research before making any type of investment.”
Source: ambcrypto.com
