Decentralized lending network Ola Finance has lost about $3.6 million on the Fuse Network, one of the many blockchains it operates on, after an unknown hacker took advantage of a re-entrancy vulnerability in one of its smart contracts.
<h2><strong>Hacker Took Advantage of a Re-Entrancy Bug </strong></h2>
PeckShield, blockchain security, and data analytics company, unveiled in a Twitter thread on how the attackers managed to drain Ola finance’s liquidity. As per PeckShield's analysis, the attack became possible after the hacker took advantage of a re-entrancy bug in one of Ola’s smart contracts.

https://twitter.com/peckshield/status/1509431646818234369

The attacker began by withdrawing funds using Tornado Cash which allowed him/her to transfer the crypto without leaving a trace. After transferring the funds to the Fuse network, the borrower used them as collateral for issuing loans on Ola’s lending platform. The attacker was then able to remove the collateral without paying back the loan by taking advantage of the re-entrancy bug.

The hacker repeated this process several times across different Ola pools. Lastly, they transferred the drained funds to wallets on <a href="https://etherscan.io/address/0xbcdb800d77ccaac6597830b026d6af78a1118f42" target="_blank" rel="nofollow noopener">Ethereum</a> and <a href="https://bscscan.com/address/0xbcdb800d77ccaac6597830b026d6af78a1118f42" target="_blank" rel="nofollow noopener">BNB Chain</a>.
<h2><strong>DeFi Hacking Spree Continues</strong></h2>
Ola has paused its lending protocol on the Fuse network and that it will soon publish an “official report detailing the exploit.” Meanwhile, its services on other blockchains were unaffected by the exploit and will remain operational.

This is not the first, nor the largest re-entrancy attack in crypto’s history. Just two weeks ago, two lending protocols on the Gnosis blockchain suffered similar exploits. In fact, the infamous 2016 DAO attack that led to an Ethereum hard fork was also a version of a re-entrancy attack.

Ola Finance Exploited for $4M in Latest DeFi Hack

Decentralized lending network Ola Finance has lost about $3.6 million on the Fuse Network, one of the many blockchains it operates on.

Jafrin is a cryptocurrency journalist/researcher fascinated by the world of decentralization. She is hopeful towards blockchain’s innovation and its potential to reshape the world for good. Currently, she is bringing out the best of cryptosphere via covering the latest ins and outs of the blockchain space.

Ola Finance Exploited for $4M in Latest DeFi Hack

Top Picks