ChainCatcher report: Security firm CertiK analysis reveals that a legacy MakerDAO auction keeper contract was exploited, resulting in the theft of 200 ETH, valued at over $5 million. CertiK states that the root cause was the absence of access control in the 0x8804d1de function within the keeper implementation contract. This contract previously participated in the March 2020 "Black Thursday" liquidation crisis, during which it won ETH with zero bids; four lots of 50 ETH each remained unsettled. The attacker seized these funds and withdrew them via Tornado Cash in increments of 10 ETH per transaction. Although this contract is no longer part of the current Sky ecosystem, other outdated contracts containing remaining funds may still be vulnerable to attack.
CertiK: MakerDAO Legacy Auction Contract Exploited, 200 ETH Stolen
ChaincatcherShare
Summary
ETH news: Security firm CertiK reported that a legacy MakerDAO auction keeper contract was exploited, enabling attackers to steal 200 ETH, valued at over $500,000. The vulnerability stemmed from missing access control in the 0x8804d1de function. The contract was active during the March 2020 "Black Thursday" liquidation crisis, where it won ETH at zero bids. Four lots of 50 ETH each remained unsettled, and the attackers withdrew the funds via Tornado Cash. ETH update: Although the contract is no longer core to the Sky ecosystem, outdated contracts with remaining funds may still be vulnerable.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.