Unmasking the Cross-chain Protocol Loopholes: The $42 Billion Illusion Attack and the Future of Blockchain Security

Posted on by Artificial Intelligence
A noir-style landscape depicting two contrasting worlds linked by a bridge, one brimming with vibrant colours symbolizing blooming blockchain platforms, the other portraying the illusion of wealth with ghostly tokens floating around. The bridge, shrouded in a wavering haze, shows a silhouette of masked perpetrators exploiting a loophole. The image is tinged with a sense of foreboding, capturing the inherent risks within blockchain ecosystem.

In an unfolding narrative of concerns over security, attackers reportedly issued billions worth of tokens on Sunday morning, exploiting a function in the cross-chain protocol of PolyNetwork’s bridge tool. These bridges, which serve as the links between differing blockchain platforms, use a smart contract to lock value on one network and release it on another. However, it appears the suspected assailants exploited this process, duping the bridge into issuing tokens on one network that, in reality, were non-existent.

Specifically, the attackers purportedly minted 24 billion Binance USD (BUSD) and bnb (BNB) on the Metis blockchain, along with 999 trillion shiba inu (SHIB) on the Heco blockchain. This created an illusion of the attackers’ wallet ballooning to hold over $42 billion worth of tokens.

However, the facade quickly crumbled due to an abysmal lack of liquidity, which impeded the miscreants from capitalizing on their ill-gotten token wealth. Developers from Metis affirmed there was no “sell liquidity available” for the BNB and BUSD tokens while the illicit METIS tokens got confined in the PolyNetwork bridge.

Conversely, assorted other tokens were liquifiable, enabling the attackers to swap 94 billion SHIB tokens for 360 ether (ETH), and pocketing multiple ether on various other exchanges. Therefore, the repercussions of such potential manipulations present the need for ever-vigilant security.

Considering this isn’t PolyNetwork’s first encounter with attacks, bridges, for all their utility, prove to be a double-edged sword within the blockchain ecosystem. While vital for the transfer of billions of dollars’ worth of tokens, delinquency repeatedly strikes them due to the large volumes transported.

Just last year, PolyNetwork faced assault from cyber pirates who plundered $600 million after supposedly intercepting a private key used to endorse a cross-chain message. Therefore, while the importance of bridges to the crypto ecosystem is indubitable, a precarious balancing act between functionality and vulnerability lingers.

Source: Coindesk

Sponsored ad

More Articles

A gloomy, stormy financial landscape under a somber twilight sky, with a dramatic depiction of a monolithic token crashing into the ground, symbolizing the fall of value in a rug pull scam. A phantom figure sneaking away with a bag of tokens in a highly stylised, noir comic illustration style, to illustrate the exit of a fraudulent developer. The atmosphere should evoke a sense of loss, surprise, and an understandable hint of betrayal.

Rug Pull Scams in Crypto: Rising Threat or Unavoidable Risk?

“Lucky Star Currency (LSC), a Binance Smart Chain based altcoin token, has reportedly suffered a ‘rug pull’ by its developer, resulting in an estimated loss of $1.11 million and a significant decrease in its value. This event adds to a growing list of similar malicious crypto schemes, affirming reportedly shocking statistics that “12% of all Binance Smart Chain-based tokens are rug pulls.” It highlights the need for investors to exercise caution in the crypto industry.”

An abstract scene presenting a swirling web of tokens, bridges, and digital networks signifying outflows, cast in the soft, eerie glow of a fading dusk. It conveys a sense of mystery and intrigue, with phantom figures moving tokens in a spectral dance. It echoes the style of cyberpunk art, projecting an edgy, suspenseful mood, emphasizing the cryptic nature of the event.

Cryptic Outflows in Multichain: Unraveling the Mystery of the $120 Million Token Exodus

Multiple bridge contracts run by Multichain encountered significant outflows involving widely held tokens. The Fantom bridge was nearly emptied, surpassing $120 million in total value. The unexpected withdrawals created concern across social media, with some suspecting a potential digital intrusion or ‘hack’. Cryptocurrency projects are reassuring communities about this potential exploit.