Conic Finance loses $3.2M to reentrancy attack on ETH Omnipool
DeFi protocol Conic Finance mapag- that it was exploited via a reentrancy attack earlier today for an undisclosed sum. A reentrancy attack allows an attacker to drain funds of a vulnerable contract by repeatedly calling the withdraw function before it updates its balance. This attack has been commonly used to exploit several DeFi protocols. Conic Finance stated that it initially disabled the front end of its Omnipool Ethereum deposits, adding that it has initiated a fix “The root cause was a re-entrancy attack that was able to be performed because of a wrong assumption as to what address is returned by the Curve Meta Registry for ETH in Curve V2 pools.” Curve Finance also that only the ETH Omnipool was affected. According to its website, Conic Finance allows liquidity providers to diversify their exposure to multiple Curve pools easily. Any user can provide liquidity into a Conic Omnipool, which allocates funds across Curve in proportion to protocol-controlled pool weights. Conic Finance did not respond to humiling ng karagdagang komentaryo sa oras ng press. Meanwhile, blockchain security firm Decurity naglalagay that the exploit led to the loss of 1724 ETH worth $3.2 million. Decurity noted that the exploiter was active yesterday and performed a series of small hacks before
