BetterBank exploited for $5M through unauthorized bonus minting

Source Cryptopolitan

BetterBank, a Web3 protocol, was exploited for up to $5M based on recent estimations. The protocol lost from unauthorized bonus minting, based on user-generated liquidity pairs. 

BetterBank, a Web3 protocol promising DeFi banking, was exploited for an estimated $1M to $5M. The losses came from unauthorized reward minting, based on rogue liquidity pairs. 

BetterBank first noticed unauthorized minting and withdrawals in the past day, sparking speculations as to the source of losses. 

BetterBank to relaunch reward smart contract

The protocol team was active in handling the attack and ended up compensating losses through its reserves. BetterBank also plans to relaunch its reward program for LPs with a new token airdrop and a new smart contract.

BetterBank originally awarded bonuses for providing liquidity for the FAVOR token. However, investigation showed the liquidity pairs were untracked, and users could create a FAVOR pair against any token, even worthless newly created assets. 

Despite the rogue pairs, the exploiter still received ESTEEM tokens, managing to mint a significant amount. BetterBank claimed the contract used to issue rewards was audited, but there was no vetting of the quality of FAVOR liquidity providers. On-chain investigation also showed the rogue minting managed to avoid the tax on bulk-minting rewards, by using external liquidity pairs. 

BetterBank was built on PulseChain, using niche stablecoins for its liquidity. The attacker holds a remaining amount of 700K pDAI, still requiring bridging to make the tokens usable. The project team reached out to the hacker by messaging the exploit address, but did not receive an answer or a white hat proposal. 

BetterBank was exploited at its peak

BetterBank was among the top 5 DeFi protocols on PulseChain. Recently, the project announced $30M in total value locked. Despite the hype, PulseChain invited skeptics, mostly due to the chain’s volatile asset. 

Following the exploit, BetterBank is down to $7.96M in total liquidity, with weeks to repair smart contracts and reputational damage. The protocol also carries $10.31M in borrowed liquidity. 

Pulse Chain also recently saw growth in its DeFi sector, recovering its liquidity above $300M. Pulse Chain was also affected, as Pulse and PulseX tokens were also part of the exploit. As a result of the hack, the PulseX token fell by over 15%.

BetterBank exploited for up to $5M in rogue bonus attack.
PulseX fell by over 15% following the BetterBank exploit. | Source: CoinGecko.

The recent exploit was part of a series of attempts against relatively small DeFi apps. Targeting niche tokens makes it more difficult for hackers to swap and mix their funds. However, in the case of BetterBank, the contract contained low-hanging fruit for generating low-value liquidity, inviting hackers to drain the protocol. Based on a previous Cryptopolitan report, hackers often target swap or bridge contracts for the ability to generate or withdraw unauthorized liquidity.

Overall, the reputation and market price losses were much higher compared to the final haul of the hacker, even if the attacker managed to liquidate the stolen stablecoins. 

The hacker still managed to move 215 ETH stored on the Ethereum chain, making it easier for the funds to be mixed or swapped. 

KEY Difference Wire: the secret tool crypto projects use to get guaranteed media coverage

Disclaimer: For information purposes only. Past performance is not indicative of future results.
placeholder
Canada Unemployment Rate expected to edge higher in September Statistics Canada will release its Labour Force Survey on Friday, and markets are bracing for a mixed print.
Author  FXStreet
9 hours ago
Statistics Canada will release its Labour Force Survey on Friday, and markets are bracing for a mixed print.
placeholder
Gold hits pause on record run; but eyes eighth weekly gainGold prices edged lower on Friday as investors booked profits following the metal's surge past the $4,000-an-ounce mark earlier this week.
Author  Reuters
10 hours ago
Gold prices edged lower on Friday as investors booked profits following the metal's surge past the $4,000-an-ounce mark earlier this week.
placeholder
Yen Faces Largest Weekly Drop in a Year, Raising Prospects of Government InterventionOn Friday, the USD/JPY exchange rate hovered around 153, maintaining its highest level in eight months, with intraday peaks hitting 153.27.
Author  TradingKey
10 hours ago
On Friday, the USD/JPY exchange rate hovered around 153, maintaining its highest level in eight months, with intraday peaks hitting 153.27.
placeholder
USD/CAD Price Forecast: Targets six-month highs near 1.4050 as bullish bias prevailsUSD/CAD continues to gain ground for the fourth successive day, trading around 1.4030 during the early European hours on Friday.
Author  FXStreet
10 hours ago
USD/CAD continues to gain ground for the fourth successive day, trading around 1.4030 during the early European hours on Friday.
placeholder
Pound Sterling slides further against US Dollar despite dovish Fed remarksThe Pound Sterling (GBP) holds onto losses near its two-month low around 1.3280 against the US Dollar (USD) during the European trading session on Friday.
Author  FXStreet
10 hours ago
The Pound Sterling (GBP) holds onto losses near its two-month low around 1.3280 against the US Dollar (USD) during the European trading session on Friday.
goTop
quote