Decentralized finance protocol Zunami Protocol recently confirmed that its “zStables” stablecoin pool has been attacked. Blockchain security firm PeckShield estimates that more than $2.1 million was stolen from Zumani’s Curve pool on August 13, linking the exploit to price manipulation issues. Blockchain security company Ironblocks also came up with similar numbers.
PeckShield detected the vulnerability on Curve at 10:47 UTC on August 13, and Zunami confirmed it about 20 minutes later. Zunami stated that the collateral in the pool remains secure and the issue is currently under investigation.
A flash loan price manipulation attack is currently believed to have occurred, with the Zunami UZD and Zunami ETH pools affected. Zunami is a decentralized revenue aggregator protocol that allows users to stake stablecoins to earn revenue, with its largest stable pool located on Curve.