Odaily Planet Daily report: Security firm CertiK analysis reveals that a legacy MakerDAO auction keeper contract was exploited, allowing the attacker to withdraw 200 ETH, valued at over $5 million. CertiK stated that the root cause was the absence of access control in the 0x8804d1de function within the keeper implementation contract. This contract participated in the March 2020 "Black Thursday" liquidation crisis, during which it won ETH with zero bids; four bids of 50 ETH each remained unsettled. The attacker seized these funds and withdrew them via Tornado Cash in increments of 10 ETH per transaction. Although this contract is no longer part of the current Sky ecosystem, other outdated contracts containing remaining funds may still be vulnerable to attack.
MakerDAO Legacy Auction Contract Exploited, 200 ETH Stolen Worth Over $500,000
KuCoinFlashShare
Summary
ETH news: A legacy MakerDAO auction contract was exploited, resulting in the theft of 200 ETH, valued at over $500,000. CertiK traced the breach to a missing access control in the 0x8804d1de function. The contract was active during the March 2020 "Black Thursday" liquidation crisis, where it won ETH with zero bids. Four unclaimed bids of 50 ETH each were later claimed by an attacker, who transferred 10 ETH per batch via Tornado Cash. Although no longer central to the Sky ecosystem, outdated contracts containing funds may still be vulnerable. ETH update: This incident underscores the importance of ongoing smart contract audits.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.