Polkadot’s Treasury lost approximately $1.381 million following an attack against the decentralized stablecoin dotUSD between October 24 and 26. The flaw had been patched in the codebase in June, but the fix had not been deployed to the affected production systems before the attack. The attacker manipulated Polkadot Asset Hub’s cross-chain messaging system to reduce dotUSD’s recorded supply without debiting users’ accounts, distorting prices in the DOT/dotUSD liquidity pool. Parity Technologies ultimately deployed runtime version 2.5.1 on October 26 and corrected dotUSD’s recorded supply on October 30, while no user funds were lost and the stablecoin remained fully backed by USDT.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
