Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesCopyBotsEarn

DeFi Protocol Delta Prime Loses $6M in Admin Key Exploit

CryptotimesCryptotimes2024/09/16 13:36
By:Gopal SolankyVaibhav Jha

DeltaPrime, a decentralized borrowing protocol and crypto broker, has been hit by a significant security breach resulting in over $6 million in losses. The exploit, identified by blockchain security firm Cyvers, affected the Arbitrum version of the platform and is attributed to a private key leak.

Several blockchain security experts and analysts noted this breach and shared that the hacker had gained control of Delta Prime admin proxy. This access enabled the attacker to upgrade the proxy and direct it toward a malicious contract. This resulted in draining of multiple liquidity pools including DPUSDC, DPARB, and DPBTCb.

Blockchain security firm Cyvers confirmed the exploit and shared post on X, stating that they detected “multiple suspicious transactions” related to DeltaPrime. According to the firm, the incident occurred due to the admin losing control of a private key, allowing unauthorized access to platform funds. As a result, users were temporarily unable to withdraw their assets from the Arbitrum version of DeltaPrime, given its borrowing and lending structure.

The DeltaPrime team responded promptly by informing users via Discord and X (formerly Twitter), acknowledging the issue and assuring the community that they were working on a resolution. 

“The risk is contained, we’re working on asset-retrieval and the insurance pool will cover any potential losses where possible / necessary,” said the team in the X post, adding “Additionally, we’re looking into other ways to reduce user losses to a minimum.”

This incident marks the second significant breach for DeltaPrime in recent months. In July 2024, the protocol suffered a $1 million hack due to a misconfiguration, which allowed an attacker to take over accounts, repay loans, and withdraw collateral.

Following the previous exploit of July, DeltaPrime team had re-audited its codebase and assured users that vulnerabilities had been patched. However, the recurrence of another major breach raises concerns about the platform’s security measures.

Follow The Crypto Times on Google News to Stay Updated!
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Stake to earn
APR up to 10%. Always on, always earning.
Stake now!

You may also like

Breakeven price added to spot trading

To improve calculations for individual assets and spot PnL data,a new indicator called ''breakeven price'' was introduced in spot trading starting from September 19, 2024, at 10:15:44 AM (UTC+8). Breakeven price = (initial position size × initial breakeven price + change in position size × price at

Bitget Announcement2024/09/29 10:14

LINKUSD is Now Available on Futures

Bitget launched LINKUSD futures on September 29 , 2024 (UTC+8) with a maximum leverage of 20x. Welcome to try futures trading via our official website (www.bitget.com) or Bitget APP. LINKUSD-M perpetual futures: Parameters Details Listing time September 29, 2024 17:40 (UTC+8) Underlying asset LINK

Bitget Announcement2024/09/29 09:46