BSC-Based ‘Belt Finance’ DeFi Protocol Exploited for $6.3 Million

The Belt Finance protocol has become the latest Binance Smart Chain-based DeFi platform to lose millions to software exploitation.

According to a post on the Rekt blog, the attacker managed to drain the money through exploitation in the way that the protocol calculates the value of its collateral.

“An incorrect share valuation helps to add another notch to the now infamous flash loan exploit season on the BSC,” the post said. “Yet another fork of a fork has rolled off the conveyor belt with $6.3M falling straight into the hands of the hacker.”

May 30, SushiSwap core developer, Mudit Gupta described the incident in a Twitter thread. He explained that the attacker exploited several aspects of Belt’s operations to take out flash loans and then inflate the value of its pools; the attacker then repaid the loan, pocketing more than $6 million in the process.

“Basically, the issue happened because Belt incorrectly integrated with Ellipsis,” Gupta said. Ellipsis is a BSC-based stablecoin decentralized exchange.

“A similar issue happened last month as well in belt finance, but at that time, the problem was a buggy integration with Venus. I wonder if belt has any bug-free integration (sic),” he continued. In addition, Venus is a lending protocol based on the Binance Smart Chain.

The Belt Finance exploitation marks the eighth time that a BSC-based protocol has been exploited by a hacker this year. Belt joins the ranks of Cream Finance, bEarn, Bogged Finance, Uranium Finance, Meerkat Finance, SafeMoon and Spartan Protocol.

Binance has reportedly sought analytical support from the cybersecurity firm, CipherTrace to prevent further exploitations from taking place on BSC.

(Photo: flickr)

bitcoin
Bitcoin (BTC) $ 70,314.84 0.94%
ethereum
Ethereum (ETH) $ 3,563.65 1.07%
tether
Tether (USDT) $ 0.999575 0.05%
bnb
BNB (BNB) $ 609.94 3.69%
solana
Solana (SOL) $ 187.37 1.90%
staked-ether
Lido Staked Ether (STETH) $ 3,558.52 1.41%
xrp
XRP (XRP) $ 0.620047 1.29%
usd-coin
USDC (USDC) $ 0.998951 0.19%
dogecoin
Dogecoin (DOGE) $ 0.214458 8.48%
cardano
Cardano (ADA) $ 0.647295 0.43%
   
$0.0000  $0.0000  (0.00%)
   
$0.0000  $0.0000  (0.00%)
   
$0.0000  $0.0000  (0.00%)
   
$0.0000  $0.0000  (0.00%)
   
$0.0000  $0.0000  (0.00%)
   
$0.0000  $0.0000  (0.00%)