Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesCopyBotsEarn
Pendle says it saved $105 million that could have been further drained amid Penpie hack

Pendle says it saved $105 million that could have been further drained amid Penpie hack

The BlockThe Block2024/09/03 16:00
By:The Block

Quick Take DeFi protocol Pendle says it saved around $105 million from being further drained following a $27 million hack of Pendle-based yield optimizer Penpie. The project said in a post-mortem that funds on Pendle were not at risk, and normal operations have since resumed, though Penpie remains paused.

DeFi project Pendle claims to have safeguarded around $105 million in funds that could have been drained from Penpie following a hack on Tuesday on the independent Pendle ecosystem yield optimizer.

In a post-mortem following the incident early Wednesday morning, Pendle said the funds were protected following a prompt pause in its contracts. “Thanks to coordinated efforts from multiple parties, further breaches were mitigated, and Pendle contracts have now been unpaused. Normal operations have resumed,” the project wrote on X. “We want to reassure Pendies that funds on Pendle remain safe and unaffected, and we will continue to prioritize the safety and security of our platform above all else.”

However, the attacker still managed to exploit Penpie’s protocol for around $27.3 million , with various stolen assets exchanged for 11,109 ETH, according to blockchain analytics provider Lookonchain.

Blockchain security firm PeckShield said the root cause was introducing an “evil market” — a malicious contract used to inflate the staking balances on Penpie to claim unwarranted rewards.

Pendle confirmed that the vulnerability was linked to a unique feature that allowed permissionless listing of Pendle markets on Penpie. It claimed its in-house monitoring system immediately detected the suspicious contract, which had been funded from Tornado Cash. However, it was not able to prevent the initial attack.

Penpie’s PNP token fell more than 33% immediately following the incident, according to CoinGecko data, while Pendle’s native token is down around 9% over the past 24 hours, per The Block’s Pendle Price Page .

Penpie, which remains paused, later said it was willing to negotiate with the hacker following the exploit. In exchange for their cooperation, it offered no legal action to be pursued, the attacker's identity would remain confidential, and they would receive a percentage of the funds as a bounty reward.


0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Locked for new tokens.
APR up to 10%. Always on, always get airdrop.
Lock now!