Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnWeb3SquareMore
Trade
Spot
Buy and sell crypto with ease
Margin
Amplify your capital and maximize fund efficiency
Onchain
Going Onchain, without going Onchain!
Convert & block trade
Convert crypto with one click and zero fees
Explore
Launchhub
Gain the edge early and start winning
Copy
Copy elite trader with one click
Bots
Simple, fast, and reliable AI trading bot
Trade
USDT-M Futures
Futures settled in USDT
USDC-M Futures
Futures settled in USDC
Coin-M Futures
Futures settled in cryptocurrencies
Explore
Futures guide
A beginner-to-advanced journey in futures trading
Futures promotions
Generous rewards await
Overview
A variety of products to grow your assets
Simple Earn
Deposit and withdraw anytime to earn flexible returns with zero risk
On-chain Earn
Earn profits daily without risking principal
Structured Earn
Robust financial innovation to navigate market swings
VIP and Wealth Management
Premium services for smart wealth management
Loans
Flexible borrowing with high fund security
Penpie DeFi platform hit by $27 million security breach

Penpie DeFi platform hit by $27 million security breach

GrafaGrafa2024/09/04 23:35
By:Isaac Francis

The decentralised finance (DeFi) platform Penpie (CRYPTO:PNP), built on the Pendle (CRYPTO:PENDLE) network, reportedly suffered a major security breach on September 3, 2024, resulting in the loss of approximately $27 million in various wrapped and synthetic crypto assets.

The breach was first identified by the on-chain monitoring system Cyvers Alert, which detected the exploit involving a smart contract initially funded with 10 Ether (CRYPTO:ETH) via Tornado Cash (CRYPTO:TORN).

Following the breach, Penpie acknowledged the incident, referring to it as a "security compromise."

The team halted all transactions and announced efforts to address the situation.

Pendle, the network on which Penpie operates, also responded swiftly by conducting thorough investigations to ensure its own funds were secure.

As a precaution, Pendle temporarily paused all contracts and provided support to the Penpie team to help mitigate the impact of the breach.

The Pendle team released an initial post-mortem report detailing the timeline of events surrounding the attack.

According to the report, their system immediately flagged the suspect contract as potentially dangerous when it was deployed due to its connection with Tornado Cash.

In response, Pendle initiated defensive measures to protect the network and its broader ecosystem against any potential follow-up attacks.

The protocol also collaborated with cybersecurity firms like Seal 911 to develop strategies to prevent further risks.

After thorough checks, Pendle unpaused its contracts and resumed normal operations.

In an attempt to recover the stolen funds, Penpie has reached out to the hacker, proposing a negotiation for a bounty.

The DeFi platform has offered the hacker immunity, anonymity, and a white-hat role if they agree to return the stolen assets.

Penpie has pledged not to pursue legal action and has promised not to reveal the hacker's identity.

As of the latest update, it remains unclear whether the hacker has accepted Penpie’s offer or initiated contact with the platform's team.

While Penpie's operations are still on hold, the team is working to restore its front end to ensure users can access their funds securely.

At press time, Penpie (PNP) was priced at $0.9514.

0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!