DeFi Exactly And Harbor Protocols Experience Breakdown Attacks On August 18

The theft of Ether appeared on the Exactly and Harbor exchanges (photo: dock. pexels)

JAKARTA - The decentralized finance protocol (DeFi) Exactly and Harbor underwent attacks on August 18 in two separate attacks, and did not appear to be linked to each other. This is known according to blockchain security firms DeDotFi and PeckShild.

On-chain data reveals that 4.323.6 Ether (ETH), worth nearly 7.3 million US dollars (Rp110.2 billion) at the time of writing news, was stolen from the Exactly Protocol. Hackers then moved 1.490 ETH via Across Protocol and 2.832.92 ETH to the Ethereum network via Optimism Bridge.

Exactly is one of the crypto lenders on the Optimism network. Initial reports said more than 7,160 ETH were stolen, worth nearly $12 million, but later revised to a smaller number. The perpetrators of the attack targeted Debt Manager's periphery contract.

"The perpetrator of the attack entered a malicious market contract address, avoided checking permits, and carried out a malicious deposit function to steal assets deposited by the user. About 7.3 million US dollars were stolen," said Exactly. The protocol reported to the police and attempted to communicate with the perpetrators to return the stolen assets, his team stated on X (formerly Twitter).

In another security incident, Harbor's stablecoin protocol revealed it was a victim of an attack that resulted in financial losses in its stables, as well as in the fault stOSMO, LUNA, and WMATIC. At the time of writing the news, the amount of stolen crypto assets is unclear. Harbor is reportedly working to track the funds and estimate the total loss.

This attack follows a number of security incidents in the DeFi ecosystem over the past few weeks. On July 30, a vulnerability in three versions of Vyper's programming language resulted in more than US$61 million (Rp921.5 billion) being stolen from a stablecoin pool on Curve Finance.

Other threatened protocols in recent days include Earn.Finance, with at least USD 287,000 (IDR 4.3 billion) stolen ETH, plus a loss of USD 2.1 million (IDR 31.7 billion) covered by Protocol Zunami in another attack.