Over the week, Solana-based DeFi protocol Nirvana Finance suffered a flash loan attack, causing the stablecoin to depeg from $1.
The hacker borrowed $10 million USDC from Solend’s flash loan to exploit $3.49 million USDT from the Nirvana Finance Treasury.
Both $NIRV (stablecoin) and $ANA (Nirvana Finance’s native token) dropped by 85% following the attack.
The people at SolanaFM gave a good breakdown of how the exploit happened:
- Hacker borrowed US$10 million USDC from Solend’s flash loan
- They use the borrowed fund to mint US$10 million worth of $ANA
- Hacker swapped the newly minted $ANA for $USDT and received US$3.5 million USDT from Nirvana Treasury
- They then return the $10 million USDC to Solend and transfer the full $3.5 million USDT into an ETH account.
The Nirvana team is now offering the hacker US$300,000 or 8.5% of the hacked amount as a whitehat bounty for the return of the treasury.
For the return of the treasury, the team would also stop all ongoing investigations in good faith.
[Editor’s Note: This article does not represent financial advice. Please do your own research before investing.]
Featured Image Credit: CoinCu News