Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • TRADING
  • HACKING
  • SLOT
  • CASINO
  • SUBMIT
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • TRADING
  • HACKING
  • SLOT
  • CASINO
  • SUBMIT
Crypto Flexs
Home»HACKING NEWS»Junami Hack Postmortem: What Happened?
HACKING NEWS

Junami Hack Postmortem: What Happened?

By Crypto FlexsApril 18, 20242 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Junami Hack Postmortem: What Happened?
Share
Facebook Twitter LinkedIn Pinterest Email

Note: Ackee audited previous versions of the protocol before the attacked MimCurveStakeDAO strategy was added.

Exploit Causes

The exploit consisted of two hacks, both of which: Price caching vulnerability The first target was Zunami ETH (zETH) and the second target was Zunami Stable (UZD). The first attack was drained. Only 26 WETH, the second is a whopping 1178 WETH.

The root cause was price manipulation using . MIMCurveStakeDao The strategy is to then cache the inflated price for an entire block of UZD (suitable for flash lending) and then reverse the previous operation to profit from the inflated price.

price caching

UZD’s Liquidity Pool (LP) price caching was partially implemented in version 1.0. thanked By Ackee Blockchain. However, it is not used globally and functions as follows: balanceOf Instead of caching, we were making multiple costly calls (calculating LP prices in our strategy).

Caching has been expanded with the following features: totalSupply, balanceOf and allowance later UZD version 1.1. Caching has been adjusted in the following way:

source

This allowed inflated prices to be called in other contracts. balanceOf function.

Version 1.1 was released without an audit. It was later audited by HashEx for the release of v1.2 on October 29, 2023. audit reportNo attack vectors using cached functions were found.

MIMCurveStakeDao Strategy

This strategy was introduced in commit. 6df0ae5. Since the calculation depends on the price and balance of the strategy, an attacker can change the LP price calculation by donating SDT tokens to the strategy. This strategy was audited by HashEx before release (see this). audit report) However, no exploitability was found.

attack

The attack occurred on August 13 and can be viewed here. https://explorer.phalcon.xyz/tx/eth/0x0788ba222970c7c68a738b0e08fb197e669e61f9b226ceec4cab9b85abe8cceb

Or you can check: PoC (Good job DeFiHackLabs!)

We hope this postmortem will be helpful and contribute to making web3 a safer place free of hacking and exploits.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

The US government checks the economic data on the chain with 60% Pyth Rocket 60% Pyth Network.

August 28, 2025

Complete re -creation practice guide -AcKee Blockchain

August 26, 2025

Distributed financial introduction

August 24, 2025
Add A Comment

Comments are closed.

Recent Posts

Ethereum-Based Meme Project Pepeto ($PEPETO) Surges Past $6.5M In Presale

August 29, 2025

Use Australia’s Top Cloud Mining Tools To Become A Millionaire!

August 29, 2025

Bitcoin is under pressure with gold aiming to be the highest ever.

August 29, 2025

The US government posts GDP data on Bitcoin block chain.

August 28, 2025

Pudgy Penguins

August 28, 2025

The US government checks the economic data on the chain with 60% Pyth Rocket 60% Pyth Network.

August 28, 2025

GCL Subsidiary, 2Game Digital, Partners With KuCoin Pay To Accept Secure Crypto Payments In Real Time

August 28, 2025

Tether Announces Plan To Bring USD₮ To RGB, Advancing Native Stablecoins On Bitcoin And Lightning

August 28, 2025

Ether Leeum Game Football. Fun market caps increase 10 times within two weeks.

August 28, 2025

Defi Surges, BTC Swings & Tradfi faces freezing: Daily encryption failure

August 28, 2025

7 Legit Cloud Mining Platforms For Daily Bitcoin Income In 2025

August 27, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

Ethereum-Based Meme Project Pepeto ($PEPETO) Surges Past $6.5M In Presale

August 29, 2025

Use Australia’s Top Cloud Mining Tools To Become A Millionaire!

August 29, 2025

Bitcoin is under pressure with gold aiming to be the highest ever.

August 29, 2025
Most Popular

Memecoins are “getting a little weird,” warns CZ.

November 29, 2024

5 Best Penny Cryptocurrencies to Invest in Today

May 18, 2024

Cryptocurrency wallet Zengo acquires stablecoin-focused Minke wallet

April 18, 2024
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.