Bifrost's three liquidity mining pools targeted in a security incident, with 881,150 DOT stolen.

iconTechFlow
Share
AI summary iconSummary
Bifrost confirmed a security incident on August 8 at 11:47 UTC, affecting three liquidity mining pools: vDOT single-coin mining, vASTR/ASTR, and vMANTA/MANTA. Attackers exploited a reward/weight amplification vulnerability in the contract security system to siphon funds from the Keeper Vault. A total of 881,150 DOT (approximately $720,000) was moved off-chain. The incident underscores risks in decentralized finance, particularly for mining node operators relying on smart contract infrastructure.

Bifrost reported that a security incident affected three liquidity mining pools on the platform: the vDOT single-asset pool, the vASTR/ASTR pool, and the vMANTA/MANTA pool. According to the disclosure, the attack occurred on August 8 at 11:47 UTC, during which the attacker exploited an abnormal reward/weight amplification mechanism to transfer the principal from the associated shared Keeper Vault—approximately 881,150 DOT (valued at around $720,000 at the time)—which was subsequently converted and withdrawn off-chain.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.