#PeckShield

Today's @DeltaPrimeDefi #exploit leads to $4.8m loss. Since affected pools are now paused, we share our initial analysis below.

The exploit is made possible due to the lack of input validation in claiming possible rewards. Specifically, the exploiter provides an evil pair in order to change the collateral asset into reward asset. By doing so, the initial collateral to borrow funds can be stolen out while leaving the debt unpaid.

We also notice the exploiter has added liquidity (~$1.3M) to #LFJ (formerly Trader Joe) & farmed $USDC on #Stargate