DeFi Protocol Delta Prime Loses $6M in Admin Key Exploit
DeltaPrime, a decentralized borrowing protocol and crypto broker, has been hit by a significant security breach resulting in over $6 million in losses. The exploit, identified by blockchain security firm Cyvers, affected the Arbitrum version of the platform and is attributed to a private key leak.
Several blockchain security experts and analysts noted this breach and shared that the hacker had gained control of Delta Prime admin proxy. This access enabled the attacker to upgrade the proxy and direct it toward a malicious contract. This resulted in draining of multiple liquidity pools including DPUSDC, DPARB, and DPBTCb.
Blockchain security firm Cyvers confirmed the exploit and shared post on X, stating that they detected “multiple suspicious transactions” related to DeltaPrime. According to the firm, the incident occurred due to the admin losing control of a private key, allowing unauthorized access to platform funds. As a result, users were temporarily unable to withdraw their assets from the Arbitrum version of DeltaPrime, given its borrowing and lending structure.
The DeltaPrime team responded promptly by informing users via Discord and X (formerly Twitter), acknowledging the issue and assuring the community that they were working on a resolution.
“The risk is contained, we’re working on asset-retrieval and the insurance pool will cover any potential losses where possible / necessary,” said the team in the X post, adding “Additionally, we’re looking into other ways to reduce user losses to a minimum.”
This incident marks the second significant breach for DeltaPrime in recent months. In July 2024, the protocol suffered a $1 million hack due to a misconfiguration, which allowed an attacker to take over accounts, repay loans, and withdraw collateral.
Following the previous exploit of July, DeltaPrime team had re-audited its codebase and assured users that vulnerabilities had been patched. However, the recurrence of another major breach raises concerns about the platform’s security measures.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Breakeven price added to spot trading
To improve calculations for individual assets and spot PnL data,a new indicator called ''breakeven price'' was introduced in spot trading starting from September 19, 2024, at 10:15:44 AM (UTC+8). Breakeven price = (initial position size × initial breakeven price + change in position size × price at
LINKUSD is Now Available on Futures
Bitget launched LINKUSD futures on September 29 , 2024 (UTC+8) with a maximum leverage of 20x. Welcome to try futures trading via our official website (www.bitget.com) or Bitget APP. LINKUSD-M perpetual futures: Parameters Details Listing time September 29, 2024 17:40 (UTC+8) Underlying asset LINK
Bitcoin Rallies as Stock Market Correlation Hits Two-Year High