DeFi
DeFi protocol Rho Markets hacked for $7.6 million
Rho Markets, a liquidity layer and lending protocol built on the Scroll Network, was compromised in an exploit that drained over $7.6 million worth of cryptocurrencies. The stolen funds were primarily comprised of USD Coin (USDC) and Tether USD (USDT), two leading stablecoins pegged to the U.S. dollar.
After detecting unusual activity, Rho Markets quickly halted platform operations to prevent further losses. They have not yet disclosed details regarding the specific Oracle vulnerability or a possible timeline for resuming operations.
We have detected some unusual activity on our platform and are currently investigating the matter. In the meantime, we will be suspending the platform. Most pools are safe, so there is no need to worry. We will keep the community updated on the progress of our investigation. The platform…
— Rho Markets📜 | Rho.scroll (@RhoMarketsHQ) July 19, 2024
According to blockchain security firm Cyvers, the exploit was due to a vulnerability in Rho Markets’ Oracle system. Oracles act as bridges between blockchains and external data sources, feeding smart contracts with crucial real-world information. In this case, a malicious actor gained unauthorized access to the oracle, allowing them to manipulate data and misappropriate crypto assets.
Scroll Network acknowledged a potential exploit within its ecosystem after verification with the Rho Markets team. Both parties initiated a coordinated response, including a temporary delay in chain finalization for further evaluation. Scroll has since confirmed that the exploit was isolated to the Rho Markets application and chain finalization has resumed.
Scroll’s acknowledgement of the exploit and its coordinated response with Rho Markets highlights a broader effort within the DeFi ecosystem to mitigate such attacks. The temporary delay in chain finalization, while disruptive, indicates a commitment to a thorough investigation.
However, Scroll’s confirmation that the exploit was specific to the Rho Markets application suggests that Scroll’s mainnet remains secure. The DeFi community will be waiting for concrete steps from Rho Markets to strengthen its oracle infrastructure and prevent similar attacks in the future.
Read also : WazirX hack: Investors’ funds in limbo after $230 million goes missing