Scan to download
BTC $77,871.97 -0.16%
ETH $2,322.00 -0.45%
BNB $628.14 -0.52%
XRP $1.42 -0.90%
SOL $85.20 -1.47%
TRX $0.3251 +0.34%
DOGE $0.0981 -0.56%
ADA $0.2477 -1.88%
BCH $448.07 -0.97%
LINK $9.33 -1.14%
HYPE $42.26 +2.69%
AAVE $96.17 +0.67%
SUI $0.9303 -1.65%
XLM $0.1680 -1.33%
ZEC $355.41 +0.53%
BTC $77,871.97 -0.16%
ETH $2,322.00 -0.45%
BNB $628.14 -0.52%
XRP $1.42 -0.90%
SOL $85.20 -1.47%
TRX $0.3251 +0.34%
DOGE $0.0981 -0.56%
ADA $0.2477 -1.88%
BCH $448.07 -0.97%
LINK $9.33 -1.14%
HYPE $42.26 +2.69%
AAVE $96.17 +0.67%
SUI $0.9303 -1.65%
XLM $0.1680 -1.33%
ZEC $355.41 +0.53%

slippage

Rhea Finance disclosed the reason for the attack, a flaw in the slippage protection logic led to a loss of 18.4 million dollars

According to RHEA Finance's official disclosure, the NEAR ecosystem lending protocol RHEA Finance (formerly known as Burrow Finance) experienced a margin trading feature hack, resulting in a loss of approximately $18.4 million.The attacker began laying the groundwork several days prior by creating multiple fake token pools on Ref Finance and injecting liquidity, constructing a malicious exchange route that exploited a vulnerability in the protocol's slippage protection mechanism—this mechanism did not account for the scenario where intermediate tokens were reused when calculating the minimum output of multi-step exchanges—leading to the borrowed debt tokens being directed into fake token pools controlled by the attacker, triggering a large-scale forced liquidation that ultimately drained the protocol's reserve pool. During the attack, the attacker deleted a total of 55 intermediate accounts to cover their tracks. Currently, the attacker has returned approximately 3.359 million USDC and 1.564 million NEAR to the RHEA lending contract, while another 4.34 million USDT has been frozen (of which Tether froze 3.291 million and NEAR Intents froze 1.053 million). The protocol contract has been suspended, and the team is collaborating with centralized exchanges for joint tracking and has notified relevant law enforcement agencies.

Aave releases post-event analysis of the $50 million loss from buying AAVE: the core reason is insufficient market liquidity, not slippage

Aave released an analysis of the Swap event: a user executed a token exchange operation through the CoW Swap router integrated into the Aave interface. The user attempted to exchange 50,432,688 aEthUSDT (worth approximately $5,043,270) for aEthAAVE. Due to the user's order being exceptionally large in a market with insufficient liquidity, the quotes from CoW Swap were extremely poor, and the user confirmed acceptance of the quote.It should be noted that the Aave protocol itself was never at risk, as this exchange occurred outside the protocol, through the aforementioned third-party Swap protocol. Currently, the relevant user has not contacted the Aave team. The key issue in this event was insufficient market liquidity, rather than slippage.Insufficient liquidity refers to the inability of the market to provide enough assets at a specific price to meet large orders, resulting in severe price deviations. The user's order was far larger than the available market liquidity, and the CoW Swap quote was 99.9% lower than the expected market clearing price; the adverse outcome stemmed from the user's confirmation of the quote, rather than price changes during execution.The root cause of this event was the routing of large trades in a market with insufficient liquidity, leading to extreme price shocks. The user executed the trade after confirming a clear warning on the interface. To prevent similar events, Aave Shield will be introduced in the Swap widget: it will default to blocking exchanges with price shocks exceeding 25%, and users will need to manually disable this feature to execute high-risk trades. The transaction incurred approximately $110,368 in fees, which will be refunded after user verification.

A user lost approximately 50 million dollars in a single transaction due to slippage, and the founder of Aave stated that the interface had issued multiple warnings

A crypto user lost approximately $50 million in a token swap transaction on Thursday. On-chain data shows that the user exchanged about $50.43 million worth of aEthUSDT for aEthAAVE through the CoW Protocol, but due to insufficient liquidity pool depth, the transaction experienced a slippage of over 99%, ultimately resulting in the user receiving only about 327 aEthAAVE, worth approximately $36,000, with the difference being captured by arbitrage traders and network intermediaries.Aave founder Stani Kulechov posted on the X platform that the user purchased AAVE using $50 million USDT through the Aave interface. Due to the unusually large size of the single order, the interface issued an extreme slippage warning to the user and required confirmation. After accepting the warning on a mobile device, the user proceeded with the transaction.Kulechov stated that the CoW Swap router operated as expected and followed industry-standard operating procedures, but the outcome was clearly not ideal. Kulechov mentioned that Aave plans to contact the user and refund approximately $600,000 in fees charged from the transaction. Days before this incident, about $27 million in positions on Aave were liquidated, and some market participants believe that this liquidation may be related to a temporary pricing issue with wstETH.
app_icon
ChainCatcher Building the Web3 world with innovations.