Site iconSite icon ForkLog

DeFi Bulletin: SEC investigations and Cream Finance hack with funds recovery

DeFi Bulletin: SEC investigations and Cream Finance hack with funds recovery

The decentralized finance (DeFi) sector continues to attract heightened attention from crypto investors. ForkLog has gathered the most important events and news of the past weeks in this digest.

Key metrics for the DeFi segment

Total value locked (TVL) in DeFi protocols rose to $181.88 billion. The first, fourth and sixth places are held by lending protocols Aave ($14.4 billion), Compound ($11.53 billion) and MakerDAO ($9.96 billion).

Data: DeFi Llama.

DeFi Llama includes in the final figure a group of tokenised bitcoins. WBTC with $10 billion took fifth place. hBTC with $1.94 billion ranked 20th.

TVL in Ethereum applications rose to $127 billion. Over the last 30 days the figure rose 9%.

Data: DeFi Llama.

TVL in the Solana network reached $10.22 billion. Over the last 30 days the figure increased by 335%.

Data: DeFi Llama.

Trading volume on decentralised exchanges (DEX) over the last 30 days stood at $76.2 billion.

62% of the total turnover of non-custodial exchanges is accounted for by Uniswap. The second DEX by volume — SushiSwap (16.4%), the third — Curve (8.6%).

TVL of projects on Binance Smart Chain (BSC) stood at $17.88 billion.

Data: DeFi Llama.

\n\n

Media: SEC is pursuing investigations into several DeFi-sector companies

\n\n

According to The Defiant, citing a source, the SEC investigation into Uniswap Labs is part of a broader initiative aimed at the DeFi sector.

\n\n

According to WSJ, SEC officials are examining information about Uniswap and how investors interact with it. The publication suggested the investigation is in its early stages and there are currently no charges.

\n\n

However Uniswap Labs is reportedly not the only sector company under regulator scrutiny. The source noted that the Commission is conducting a wide-ranging investigation into a number of DeFi platforms.

\n\n

According to the NYT, similar actions were undertaken by the SEC in 2017-2018 against organizers of initial coin offerings. In those cases, within a few months the regulator sought information from \”dozens of people and companies\” connected with public offerings.

\n\n

Venus Project developers cancelled the vote results to reclaim control of the project

\n\n

The developers of the lending protocol Venus Project with a decentralised governance model on BSC cancelled the vote results on handing the project to a third-party development team.

\n\n

The Team Bravo group held a vote to transfer powers to develop the protocol and to distribute tokens. The organisers sought 1.9 million XVS (~$60.8 million) in funding, of which 900 000 XVS (~$29 million) were promised to be distributed among supporting users.

\n\n

The proposal attracted 1.29 million votes in favour and 1.19 million against. Team Bravo pledged to \”increase and sustain a high price for XVS for investors.\”

\n\n

The address used to deploy the Venus Project contract cancelled the vote results. The decision demonstrated control over the protocol by its creators, despite the decentralised governance model.

\n\n

Hackers withdrew over $18 million from Cream Finance DeFi protocol, but later returned most of the funds

\n\n

The DeFi protocol Cream Finance came under attack via a flash loan and lost more than $18 million. The attackers used a re-entrancy vulnerability in the AMP token contract to withdraw 462 079 976 AMP and 2 804 ETH.

\n\n

The developers promised to compensate affected users and to pay 10% of the stolen amount to the hacker if he returns the funds.

\n\n

Subsequently the hacker reimbursed most of the stolen amount, amounting to 5 152.6 ETH. The funds were credited to the project’s multisig wallet.

\n\n

Investments in DeFi

\n\n

The Polkadot-based DeFi protocol Parallel Finance closed a Series A round at $22 million. The project valuation reached $150 million.

\n\n

The round was led by Polychain Capital. Other participants included Lightspeed, Slow Ventures, Blockchain Capital and Alameda Research.

\n\n

Parallel currently has 3,000 users. The project plans to expand its base severalfold within a year and hire new staff.

\n\n

The developers of the DeFi project Syndicate raised $20 million in a Series A financing round. It was led by leading Silicon Valley venture firm Andreessen Horowitz.

\n\n

More than 150 investors participated, including Coinbase Ventures, Table Management by Bill Ackman, Alexis Ohanian, Ashton Kutcher and Snoop Dogg Ventures.

\n\n

The team will allocate the raised funds to accelerate development of technologies based on a decentralised autonomous organisation, integrate with Web3 and fintech startups, and support various communities.

\n\n

The startup Evrynet raised $7 million to build a DeFi application aimed at institutional investors.

\n\n

The private round was led by Singaporean venture capital firm Signum Capital. Participants included Petrock Capital, Ellipti Ventures and existing investors, including HashKey Capital, Everest Ventures, Hanhwa Investments and Securities, Seven Bank, UOB Venture Management, Uni-President Asset Holdings, Hopeshine Ventures, and Du Capital.

\n\n

The raised funds will be used to develop Evry.Finance, which will provide exchange services, liquidity pools and a staking platform.

\n\n

Evrynet aims to provide infrastructure to facilitate interaction between centralised and decentralised finance.

\n\n

Hacks and scams

\n\n

The DeFi protocol xToken reported a hack. User losses are estimated at $4.5 million.

\n\n

The hacker exploited a vulnerability in the xSNX product, which allows access to Synthetix-based assets without directly interacting with the protocol’s complex smart contracts.

\n\n

Founder Michael Cohen described the attacker’s actions in a blog post:

\n\n

\n\n

Cohen said that, by error, the developers left the callFunction function publicly accessible, whereas it should have been callable only from the dYdX instant loan smart contract.

\n\n

The hacker exploited the vulnerability to pressure the SNX price via xSNX assets and profit from external arbitrage, the project founder noted.

\n\n

After the attack, xToken decided to discontinue the xSNX product. The team is devising a compensation plan for users using its own token, XTK.

\n\n

The DeFi protocol Zabu Finance on the Avalanche blockchain announced a hack. The attacker withdrew crypto assets worth about $3.2 million. The price of the project’s native token ZABU collapsed to zero after the incident.

\n\n

Investigations showed that the attacker stole assets from the Spore pool. According to a blockchain explorer, they included:

\n\n

\n\n

At Zabu Finance they discovered that the hacker exploited a vulnerability in a smart contract and successfully withdrew 4.5 billion ZABU, which were sold on Pangolin and Trader Joe, fetching around $600,000.

\n\n

Immediately after the hack, the project team urged investors to promptly withdraw assets to avert losses. Zabu Finance plans to compensate users based on a snapshot of balances before and after the attack.

\n\n

The protocol also burned 93.12 million ZABU remaining in the team and treasury wallets.

\n\n

Also on ForkLog:

\n\n

\n\n

Read ForkLog’s bitcoin news in our Telegram — crypto news, rates and analysis.

Exit mobile version