{"id":49335,"date":"2021-09-13T14:08:17","date_gmt":"2021-09-13T11:08:17","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=49335"},"modified":"2025-09-02T12:11:53","modified_gmt":"2025-09-02T09:11:53","slug":"defi-project-on-the-avalanche-blockchain-hacked-for-3-2-million","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/defi-project-on-the-avalanche-blockchain-hacked-for-3-2-million\/","title":{"rendered":"DeFi project on the Avalanche blockchain hacked for $3.2 million"},"content":{"rendered":"<p>The decentralized finance (DeFi) protocol Zabu Finance on the Avalanche blockchain announced a hack. The attacker siphoned off crypto assets worth about $3.2 million.<\/p>\n<p>The project&#8217;s native token ZABU collapsed to zero after the incident.<\/p>\n<figure class=\\\"wp-block-image\\\"><img decoding=\\\"async\\\" src=\\\"https:\/\/lh5.googleusercontent.com\/Kd5EUGELEIvWvx6VPr9nUZ0US90UXcho8hMzaDWit7PB_r9Zyw3MIkgGi_boHr9BJMz8LlZaWB4I65tdfIox5AdwJJ8Yogz93CKMhhXRiWcJVrDumbalHFc8FiAAXLtf5Iz-Qj9G=s0\\\" alt=\\\"DeFi-\u043f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430 \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d\u0435 Avalanche \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0430 $3,2 \u043c\u043b\u043d\\\"\/><figcaption>ZABU\/USD chart. Data: <a href=\\\"https:\/\/www.defined.fi\/bsc\/0xc3f95ea53b392de1c36b4310a3e2a3c0e270213c?quoteCurrency=USD\\\">Defined<\/a>.<\/figcaption><\/figure>\n<p>Upon detecting the attack, Zabu Finance&#8217;s team sought help from the decentralized exchanges Pangolin and Trader Joe in the Avalanche ecosystem.<\/p>\n<blockquote class=\\\"twitter-tweet\\\" data-lang=\\\"en\\\">\n<p lang=\\\"en\\\" dir=\\\"ltr\\\">Zabu Team Wallet has not sold a single Zabu. We\u2019re under an exploit, possibly from Spore Pool. We\u2019re investigating the exploit. Need help <a href=\\\"https:\/\/twitter.com\/pangolindex?ref_src=twsrc%5Etfw\\\">@pangolindex<\/a> <a href=\\\"https:\/\/twitter.com\/traderjoe_xyz?ref_src=twsrc%5Etfw\\\">@traderjoe_xyz<\/a> <a href=\\\"https:\/\/twitter.com\/avalancheavax?ref_src=twsrc%5Etfw\\\">@avalancheavax<\/a> <a href=\\\"https:\/\/t.co\/lKysK87InM\\\">pic.twitter.com\/lKysK87InM<\/a><\/p>\n<p>\u2014 Zabu Finance \ud83d\udd3a (@zabufinance) <a href=\\\"https:\/\/twitter.com\/zabufinance\/status\/1436780056236331012?ref_src=twsrc%5Etfw\\\">September 11, 2021<\/a><\/p><\/blockquote>\n<p> <script async=\\\"\\\" src=\\\"https:\/\/platform.twitter.com\/widgets.js\\\" charset=\\\"utf-8\\\"><\/script><\/p>\n<blockquote class=\\\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\\\">\n<p>\\&#8221;The team wallet has not sold a single ZABU. We\u2019re under an attack, possibly from Spore Pool. We\u2019re investigating the exploit. Help from Pangolin, Trader Joe, and Avalanche is needed,\\&#8221; the developers said.<\/p>\n<\/blockquote>\n<p>Investigation showed that the attacker exploited a vulnerability in a smart contract and successfully withdrew 4.5 billion ZABU, which they sold on Pangolin and Trader Joe, obtaining about $600,000.<\/p>\n<p>Immediately after the hack, the project team urged investors to withdraw assets promptly to avoid losses.<\/p>\n<p>The protocol also burned 93.12 million ZABU remaining in the team and treasury wallets.<\/p>\n<p>In late August <a href=\"https:\/\/forklog.com\/en\/news\/hackers-drain-more-than-18m-from-cream-finance-defi-protocol\">attack on the DeFi protocol Cream Finance<\/a>. The loss exceeded $18 million at the time.<\/p>\n<p>A few days later, the hacker <a href=\"https:\/\/forklog.com\/en\/news\/cream-finance-defi-protocol-hacker-returns-17-6-million\">returned most of the withdrawn funds<\/a> totaling $17.6 million.<\/p>\n<p>Follow ForkLog\u2019s news on <a href=\\\"https:\/\/www.facebook.com\/forklog\\\" target=\\\"_blank\\\" rel=\\\"nofollow noopener\\\">Facebook<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The decentralized finance (DeFi) protocol Zabu Finance on the Avalanche blockchain announced a hack. The attacker siphoned off crypto assets worth about $3.2 million.<\/p>\n","protected":false},"author":1,"featured_media":49336,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1413,1154,1093],"class_list":["post-49335","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-avalanche-avax","tag-crimes","tag-defi"],"aioseo_notices":[],"amp_enabled":true,"views":"29","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/49335","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=49335"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/49335\/revisions"}],"predecessor-version":[{"id":49337,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/49335\/revisions\/49337"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/49336"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=49335"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=49335"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=49335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}