Catching the Cryptocurrency: Successful Tracking of dYdX
In a prominent disclosure, decentralized exchange dYdX identified those behind an attack on its v3 platform on November 17, 2023, which drained $9 million from its insurance fund. This groundbreaking advancement in cyber investigations marks a pivotal moment for exchanges in the fight against digital crime.
1/ After investigating the YFI incident that occurred in dYdX v3, we successfully tracked down the person responsible and reported it to law enforcement.
This is our deep dive and next steps 🧵https://t.co/JGxebpERYl
– dYdX (@dYdX) January 3, 2024
Security Upgrades: Stay one step ahead of future threats
After an attack, dYdX doesn’t just sit still. They are strengthening their v3 trading platform with improved open interest monitoring and alerts to strengthen their defenses. This move is a direct response to the sophisticated tactics used in attacks and ensures better preparedness for similar threats in the future.
Attack Analysis: A Deep Dive into Nefarious Strategies
The attacker’s methods were nothing short of calculated excellence. They opened numerous 5x leveraged long positions in over 100 wallets using the YFI/USD pair. Purchasing Yearn.finance tokens from different addresses caused the price of YFI to skyrocket by 215%. Their strategy culminated in approximately $50 million in unrealized profits.
However, their fate was reversed on November 17th when dYdX adjusted the initial margin requirements and position sizes for the YFI/USD market. The very next day, the price of YFI plummeted nearly 30% in one hour, trapping the attackers in a position they could not get out of. The resulting losses were covered by dYdX’s insurance fund, but the attacker’s holdings became negative.
Past profits and future precautions
Interestingly, this wasn’t the attacker’s first rodeo. A week ago they made a profit of about $5 million using the same strategy for SUSHI/USD. However, dYdX prevented this initial attack from impacting the v3 Insurance Fund by aggressively increasing the initial margin requirement for SUSHI/USD to 100%.
Customer funds are safe and attackers have no gain
Despite the chaos, dYdX remains confident that customer funds were not affected and that the attackers did not make any profit by manipulating the YFI market. The exchange is currently considering legal action against the individual and is sending a clear message to potential criminals in the cryptocurrency world.