In a significant blow to decentralized finance (DeFi), DEUS Finance fell victim to a major cybersecurity breach last weekend. The breach led to losses of over $6 million. Despite the extensive damage, swift and coordinated recovery efforts have managed to restore a substantial part of the stolen funds.
Unraveling the DEUS Finance Cyberattack: DEI Stablecoin in the Crosshairs
Blockchain security experts at PeckShield disclosed that the attackers exploited DEUS Finance’s DEI stablecoin on two principal networks: the BNB Smart Chain and Arbitrum. DEI, designed to hold a consistent value of $1, is currently trading at a mere $0.28, according to CoinMarketCap, significantly deviating from its intended peg.
Deconstructing the Public Burn Exploit
PeckShield, through a tweet, revealed that the attackers utilized a vulnerability called ‘public burn’ on the BNB Smart Chain, resulting in the loss of over $1.3 million. Concurrently, the breach also affected Arbitrum, leading to an additional loss of more than $5 million. Users of the Ethereum layer 2 scaling solution identified a significant error in the token contract as the core issue.
DEUS Finance’s Vigorous Recovery Initiative
In a collaborative effort, the user who discovered the issue also joined the recovery process, using white hat hacking methods to retrieve the stolen assets. DEUS Finance later confirmed on Twitter that the recouped funds were safely stored in a multi-signature wallet, under the supervision of the DeFi developer @lafachief and the trusted team at Yearn Finance DeFi project.
At present, the wallet holds 2,023 ETH tokens, equating to around $3.8 million. These funds were received from an account named “Deus DEI Exploiter”. The wallet also stores DEUS tokens worth $158,857 and USDC stablecoin valued at $702,370. The fate of the remaining stolen funds is uncertain, and whether the affected users will receive full compensation remains a question.
Navigating the Future: DEUS Finance After the Breach
The DEUS Finance breach serves as a stark reminder of the persistent cybersecurity threats in the DeFi landscape. While the recovery initiative has yielded impressive results, preventative strategies to avoid such incidents are urgently needed. It’s yet to be seen how DEUS Finance and the larger DeFi industry will respond to this demand.
***