A hacker managed to create 6 quadrillion aBNBc tokens of the Ankr decentralized finance protocol by exploiting a flaw in his smart contract. The recipe for this attack on this BNB Chain protocol would amount to more than 4.5 million dollars.
Ankr protocol comes under attack after update
The alert was given on Twitter by PeckShield, a company specializing in blockchain security. The attacker obviously created 6 quadrillion Ankr Reward Bearing Staked BNB (aBNBc)the reward token obtained for BNB staked on the Ankr protocol.
Analysts explain that the attacker used a loophole in the aBNBc smart contract allowing him to mint as many tokens as he wants. This vulnerability in Ankr’s smart contract code was reportedly introduced during a technical upgrade carried out 12 hours before the attack.
#PeckShieldAlert Seems like @ankr has been exploited, $aBNBc has dropped -50%, tons of $aBNBc have minted to https://t.co/nyfwdd6fWI
and the exploit transferred some of the stolen funds to Tornado cash or bridged them via celer and deBridgeGate to Ethereum @peckshield pic.twitter.com/vK94dIEWIt
—PeckShieldAlert (@PeckShieldAlert) December 2, 2022
The attacker has since used the Tornado Cash protocol and various bridges to exchange his funds and recover nearly $4.5 million in different cryptocurrencies:
- 900 BNB: approximately $250,000;
- 3,000 ETH: approximately $3.8 million;
Ankr quickly confirmed the attack on Twitter, stating that “all underlying assets on Ankr Staking are safe at this time, and none of the infrastructure services are affected” :
All underlying assets on Ankr Staking are safe at this time, and all infrastructure services are unaffected.
— Ankr (@ankr) December 2, 2022
A vertiginous fall of the aBNBc token
This massive creation of new tokens drastically caused the price of the aBNBc to fall, going from 305 dollars to a few dust cents in less than 30 minutes :
The price of aBNBc / WBNB begins a dizzying fall following the Ankr hack
👉 Crypto hacks on the rise – will 2022 be the worst year for DeFi?
The best way to secure your cryptocurrencies 🔒
🔥 The world leader in crypto security
Graphic source: DEX Screener
Receive a summary of crypto news every Monday by email 👌
What you need to know about affiliate links. This page presents assets, products or services relating to investments. Some links in this article are affiliated. This means that if you buy a product or register on a site from this article, our partner pays us a commission. This allows us to continue to offer you original and useful content. There is no impact on you and you can even get a bonus by using our links.
Investments in cryptocurrencies are risky. Cryptoast is not responsible for the quality of the products or services presented on this page and could not be held responsible, directly or indirectly, for any damage or loss caused following the use of a good or service highlighted in this article. Investments related to crypto-assets are risky by nature, readers should do their own research before taking any action and only invest within the limits of their financial capabilities. This article does not constitute investment advice.
AMF recommendations. There is no guaranteed high return, a product with high return potential involves high risk. This risk-taking must be in line with your project, your investment horizon and your ability to lose part of this savings. Do not invest if you are not ready to lose all or part of your capital.
To go further, read our Financial Situation, Media Transparency and Legal Notices pages.