ChainCatcher report, according to BlackHart, the DeFi project Fluid had its Ethereum-based reward distribution mechanism exploited, resulting in the theft of approximately $215,000 in assets. Fluid utilized a Merkle reward list mechanism requiring one key to initiate and another to approve. The attacker possessed both operational private keys, submitted a reward list allocating all rewards to themselves, approved it, and then claimed the funds using empty proofs. The stolen assets originated from three reward distributors, including 112,883 FLUID, 47,903 GHO, and a small amount of cbBTC, which were later exchanged for ETH and transferred via Tornado Cash. Fluid’s lending market, treasury, DEX, and user deposits were unaffected. The team replaced the compromised keys and transferred remaining reward funds within approximately 10 hours, but publicly stated only that reward claims had been paused for updates, without disclosing details of the private key compromise or the loss.
DeFi project Fluid loses $215,000 after reward contract is exploited
ChaincatcherShare
Summary
The DeFi project Fluid lost $215,000 after attackers exploited its reward contract on Ethereum. The hackers gained access to two private keys in the Merkle reward system, submitted a self-benefiting reward list, and claimed assets using an empty proof. The stolen assets included 112,883 FLUID, 47,903 GHO, and some cbBTC, which were later converted to ETH and transferred via Tornado Cash. Fluid’s lending market, vaults, DEX, and deposits remain unaffected. The team replaced the compromised keys and moved remaining funds within 10 hours, but only publicly paused reward distribution without disclosing the breach. Amid rising volatility, altcoins under scrutiny face increased oversight as the Fear & Greed Index reflects growing market anxiety.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.