According to blockchain analytic company PeckShield, the decentralized finance (DeFi) project Onyx protocol has lost $2 million worth of Ethereum (ETH) to exploiters. PeckShield informed community members about an exploit worth $2.1 million. Furthermore, the wallet address of the Onyx protocol exploiter has a balance of 1,164 ETH (approx $2.1 million). The hackers swapped some tokens, such as PEPE, USDC, USDT, Wrapped Bitcoin (WBTC), PAX Gold (PAXG), DAI, and Chainlink (LINK) for ETH. And later stole the ETH tokens and transferred them to their wallet. Later, the hackers stole an additional $61,800, taking the total to around $2.2 million. Eventually, the attackers moved the funds to another wallet and have been siphoning it off through the crypto mixer Tornado Cash. The Onyx protocol is yet to comment on the incident. Meir Dolev, the CTO of blockchain security firm Cyvers, told BeInCrypto: “The recent security breach in @OnyxProtocol resulted in an approximate loss of $2.2 million due to a recognized rounding problem inherent in the widely-used CompoundV2 fork.” A similar vulnerability was used to take advantage of Hundred Finance in last April, leading to a loss of around $7 million.
Full report : Onyx Protocol Victim of $2 Million Exploit.