Hacker Exploits BonqDAO Protocol of Over $120 Million

Published 03-02-2023, 05:38 pm
Updated 03-02-2023, 06:46 pm
© Reuters.  Hacker Exploits BonqDAO Protocol of Over $120 Million

  • $108M worth of BEUR tokens (98.65 million) and $11M worth of wrapped-ALBT stolen.
  • BonqDAO said that it had temporarily halted the protocol.

An estimated $120 million was taken from the protocol of a tiny decentralized autonomous organization (DAO). Due to a pretty large smart contract vulnerability. On February 1st, BonqDAO informed its Twitter followers of an oracle attack that compromised the Bonq protocol. And enabled the exploiter to influence the price of the AllianceBlock (ALBT) token.

According to research conducted by blockchain security company PeckShield, the total value of tokens stolen in the Bonq attack was around $120 million. This included $108 million worth of BEUR tokens (98.65 million) and $11 million worth of wrapped-ALBT (wALBT) tokens (113.80 million).

Manipulation of Price

Moreover, according to multichain portfolio tracker DeBank, the biggest transaction impacted by the vulnerability occurred on February 1 at 6:32 pm UTC and involved $82.19 million. Most large-scale trades occurred on the Polygon network.

According to PeckShield, the attacker tampered with the price of the wALBT token by altering the updatePrice function of the oracle in one of BonqDAO’s smart contracts.

Because of this, the wALBT and BEUR were targeted for exploitation. The hacker then burned all 113.8 million wALBT to unlock ALBT after exchanging around $500,000 worth of BEUR for USDC on Uniswap.

An early witness of the hack, “Spreek,” reported to his 18,800 Twitter followers that the exploiter had sold more BEUR and ALBT tokens for $500,000 in USDC and 144 ETH ($236,000) thereafter. PeckShield and others saw a precipitous decline in the value of BEUR and ALBT tokens. In a subsequent tweet, BonqDAO said that it had temporarily halted the protocol while it worked on a recovery plan.

Recommended For You:

Harmony Bridge Hackers Move Nearly $27M Stolen Funds

Latest comments

Risk Disclosure: Trading in financial instruments and/or cryptocurrencies involves high risks including the risk of losing some, or all, of your investment amount, and may not be suitable for all investors. Prices of cryptocurrencies are extremely volatile and may be affected by external factors such as financial, regulatory or political events. Trading on margin increases the financial risks.
Before deciding to trade in financial instrument or cryptocurrencies you should be fully informed of the risks and costs associated with trading the financial markets, carefully consider your investment objectives, level of experience, and risk appetite, and seek professional advice where needed.
Fusion Media would like to remind you that the data contained in this website is not necessarily real-time nor accurate. The data and prices on the website are not necessarily provided by any market or exchange, but may be provided by market makers, and so prices may not be accurate and may differ from the actual price at any given market, meaning prices are indicative and not appropriate for trading purposes. Fusion Media and any provider of the data contained in this website will not accept liability for any loss or damage as a result of your trading, or your reliance on the information contained within this website.
It is prohibited to use, store, reproduce, display, modify, transmit or distribute the data contained in this website without the explicit prior written permission of Fusion Media and/or the data provider. All intellectual property rights are reserved by the providers and/or the exchange providing the data contained in this website.
Fusion Media may be compensated by the advertisers that appear on the website, based on your interaction with the advertisements or advertisers.
© 2007-2025 - Fusion Media Limited. All Rights Reserved.