1. On August 18, separate attacks struck decentralized finance (DeFi) platforms Exactly and Harbor, as reported by blockchain security firms DeDotFi and PeckShield.
2. Exactly #Protocol suffered a breach where 4,323.6 Ether (ETH) worth around $7.3 million was stolen. The hackers moved 1,490 ETH via the Across Protocol and 2,832.92 ETH via Optimism Bridge.
3. Despite initial reports of over 7,160 ETH stolen, revised information confirmed a smaller amount. The attackers exploited the DebtManager periphery contract by using a malicious market contract address to bypass security checks and execute a deposit function, stealing assets deposited by users.
4. The Exactly Protocol team filed a police report and is attempting to engage with the attackers to recover the stolen assets.
5. Harbor, an interchain stablecoin protocol, was also attacked on the same day. The extent of the stolen crypto assets, which included funds from stable-mint, stOSMO, LUNA, and WMATIC vaults, is currently undisclosed. Harbor is working to trace the funds and assess the total losses.
6. These incidents add to a series of security breaches in the DeFi sector over recent weeks, including a Vyper programming language vulnerability leading to a $61 million loss in stablecoin pools on #Curve Finance, as well as compromised protocols like Earn.Finance and Zunami Protocol with substantial #ETH losses.
