Qubit Finance suffers $80 million loss following hack

According to CertiK, the hacker carried out these actions multiple times and converted all of the assets to Binance Coin as a result.
Arnold Kirimi
Posted by Arnold Kirimi January 28, 2022 2 Mins Read
According to CertiK, the hacker carried out these actions multiple times and converted all of the assets to Binance Coin as a result.

High-profile hacks have become more prevalent throughout the cryptocurrency market, and Qubit Finance is one of the latest decentralized finance (DeFi) protocols to be exploited by hackers.

Hackers were able to access and steal over $80 million from Qubit Finance, which is based on the Binance Smart Chain,  the protocol confirmed via a tweet on Friday. The addresses linked to the assault stole 206,809 Binance Coin (BNB) from Qubit's QBridge protocol. The assets are valued at more than $80 million at the time of writing.

QBridge was hacked to create “a huge amount of xETH collateral” that was subsequently used to drain the entire quantity of BNB stored on Q Bridge, according to PeckShield, which analyzed Qubit's smart contracts.

In a report by security firm CertiK, the attacker utilized a deposit option in the QBridge contract to illegally mint 77,162 qXETH, which is an asset representing Ether bridged via Qubit. The protocol was duped into believing that attackers had deposited money when they hadn't.

According to CertiK, the hacker carried out these actions multiple times and converted all of the assets to Binance Coin as a result. This makes the exploit the seventh-largest in DeFi, according to DeFiYield Rekt data.

Related: Crypto.com shares details on security breach: 483 accounts compromised

The Qubit team sent out a statement to notify clients that they are still monitoring the hacker and their impacted assets. The blog also notes that we have contacted the attacker to offer the maximum reward as determined by their program. The team has since disabled Supply, Redeem, Borrow, Repay, Bridge and Bridge Redemption features until further notice. However, they indicated that claiming is available.

Hacks, rug-pulls and protocol exploits are all common in the cryptocurrency sector. Earlier this month, decentralized finance security platform and bug bounty service Immunefi revealed that cybercrime losses surpassed $10.2 billion in 2021. On Jan. 17, the popular crypto exchange Crypto.com suffered nearly $34 million in losses following a security breach.

Tags: