Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
  • TRADE
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
  • TRADE
Crypto Flexs
Home»HACKING NEWS»Junami Hack Postmortem: What Happened?
HACKING NEWS

Junami Hack Postmortem: What Happened?

By Crypto FlexsNovember 26, 20232 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Junami Hack Postmortem: What Happened?
Share
Facebook Twitter LinkedIn Pinterest Email

There are already a lot of Zunami hack posthumous articles that are almost identical. Here is our opinion.

Exploit Causes

The exploit consisted of two hacks, both of which: Price caching vulnerability The first target was Zunami ETH (zETH) and the second target was Zunami Stable (UZD). The first attack was drained. Only 26 WETH, the second is a whopping 1178 WETH.

The root cause was price manipulation using . MIMCurveStakeDao The strategy is to then cache the inflated price for an entire block of UZD (suitable for flash lending) and then reverse the previous operation to profit from the inflated price.

price caching

UZD’s Liquidity Pool (LP) price caching was partially implemented in version 1.0. thanked By Ackee Blockchain. However, it is not used globally and functions as follows: balanceOf Instead of caching, we were making multiple costly calls (calculating LP prices in our strategy).

Caching has been expanded with the following features: totalSupply, balanceOf and allowance later UZD version 1.1. Caching has been adjusted in the following way:

source

This allowed inflated prices to be called in other contracts. balanceOf function.

Version 1.1 was released without an audit. It was later audited by HashEx for the release of v1.2 on October 29, 2023. audit reportNo attack vectors using cached functions were found.

MIMCurveStakeDao Strategy

This strategy was introduced in commit. 6df0ae5. Since the calculation is based on the price and balance of the strategy, an attacker can change the LP price calculation by donating SDT tokens to the strategy. This strategy was audited by HashEx before release (see this). audit report) However, no exploitability was found.

attack

The attack occurred on August 13 and can be viewed here. https://explorer.phalcon.xyz/tx/eth/0x0788ba222970c7c68a738b0e08fb197e669e61f9b226ceec4cab9b85abe8cceb

Or you can check: PoC (Good job DeFiHackLabs!)

We hope this postmortem will be helpful and contribute to making web3 a safer place free of hacking and exploits.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

Floki Eyes 120% Rally Valhalla launches $ 10K prizes after explosive weekly growth

July 13, 2025

Watt protocol audit summary -ACKEE blockchain

July 11, 2025

Stable for digital recovery and inheritance

July 9, 2025
Add A Comment

Comments are closed.

Recent Posts

Crypto Company is a bank license in the US during Ripple, Circle and Bito Target

July 14, 2025

HeraldEX Defines The Future With Its One-Stop Crypto Platform For Businesses

July 14, 2025

BSGM Engages CXG To Acquire FINRA/SEC-Registered Broker-Dealer To Expand Publicly Traded RWA Tokenization Operations

July 14, 2025

Tornado cash Roman storms insist on Doj Botched Key Telegram evidence.

July 14, 2025

HBAR prices overtake Bitcoin cash after a 4 -month high and 27% rise.

July 14, 2025

Algorand (Algo) Get momentum in the launch and technical growth.

July 14, 2025

Floki Eyes 120% Rally Valhalla launches $ 10K prizes after explosive weekly growth

July 13, 2025

Crypto Digital Marketing Agency to Elevate Your Project

July 13, 2025

Encryption responded to US-Vietnamese trade transactions. BTC wiped $ 110K

July 13, 2025

Rich Miner plan aims to audit a stable encryption.

July 12, 2025

Tethers in September, completing USDT support for Omni, Bitcoin Cash SLP, KUSAMA, EOS and Algorand

July 12, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

Crypto Company is a bank license in the US during Ripple, Circle and Bito Target

July 14, 2025

HeraldEX Defines The Future With Its One-Stop Crypto Platform For Businesses

July 14, 2025

BSGM Engages CXG To Acquire FINRA/SEC-Registered Broker-Dealer To Expand Publicly Traded RWA Tokenization Operations

July 14, 2025
Most Popular

Launching Memecoin on BNB Chain: Essential Steps and Strategies

January 25, 2025

Crypto Bloodbath: Top Coins Crash, Only 1 Survivor Left

July 7, 2024

Gemini expands AI capabilities with improved language support and app integration

October 5, 2024
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.