Connect with us
DAPA Banner

Crypto World

NEAR Protocol DeFi Hub Rhea Finance Loses $7.6 Million in Oracle Exploit

Published

on

Rhea Finance on Near Protocol

NEAR Protocol’s largest Decentralized Finance (DeFi) hub, Rhea Finance, suffered a $7.6 million exploit after an attacker manipulated its oracle and validation layer.

Blockchain security firm CertiK flagged the incident, confirming that assets were drained across multiple tokens.

How the Rhea Finance Exploit Unfolded

The attacker deployed fake token contracts and created fresh liquidity pools on the protocol. These pools likely distorted price feeds, misleading the oracle into validating fraudulent transactions.

According to CertiK, at least $7.6 million was extracted from Rhea Finance. Stolen funds included USDC, USDT, Zcash (ZEC), and NEAR (NEAR).

Advertisement

Vadim Zacodil, an ex-NEAR core contributor, confirmed the figures and warned users to monitor the situation closely.

Withdrawals are currently halted as the team works to contain further damage.

“The attacker created fake token contracts and added liquidity in fresh pools, likely misleading the oracle and validation layer,” CertiK noted.

Why This Matters for NEAR DeFi

Rhea Finance holds a dominant position in the NEAR ecosystem. Formed in early 2025 through the merger of Ref Finance and Burrow Finance, it serves as the primary DEX and lending layer on the network.

Advertisement
Rhea Finance on Near Protocol
Rhea Finance on Near Protocol. Source: DefiLlama

The protocol previously held over 95% of NEAR’s DeFi total value locked, making this exploit significant for the entire chain’s DeFi infrastructure.

Oracle manipulation remains one of the most persistent vulnerabilities in DeFi, with attackers repeatedly exploiting untested price feeds and thin liquidity.

The coming days will reveal the full scope of losses and whether Rhea Finance can secure affected user funds.

The post NEAR Protocol DeFi Hub Rhea Finance Loses $7.6 Million in Oracle Exploit appeared first on BeInCrypto.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Polkadot-linked Hyperbridge exploit losses hit $2.5M

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR

  • Hyperbridge increased its April 13 exploit loss estimate to about $2.5 million after a broader review across four chains.
  • The attacker extracted around 245 ETH and then minted about 1 billion fake bridged DOT tokens.
  • Polkadot confirmed that only DOT bridged through Hyperbridge was affected, while native DOT remained secure.
  • The exploit targeted a flaw in the Merkle Mountain Range proof verification logic in HandlerV1.
  • Hyperbridge paused Token Gateway operations and is working with Binance and law enforcement on fund recovery.

Hyperbridge has raised its loss estimate from the April 13 Token Gateway exploit to about $2.5 million. The project had earlier reported losses of nearly $237,000 based on early on-chain activity. However, a broader review across four chains revealed deeper damage and a two-phase attack.

Polkadot Confirms Bridged DOT Exposure

Hyperbridge said it revised the figure after reconciling transactions across Ethereum, Base, BNB Chain, and Arbitrum. The team explained that it reviewed attacker activity in two phases and included losses from incentive pools. As a result, it increased the total realized losses to roughly $2.5 million.

Polkadot stated that the incident affected only DOT bridged through Hyperbridge to Ethereum. The network confirmed that native DOT on Polkadot remained unaffected. It also clarified that the broader Polkadot ecosystem did not face a direct impact.

Hyperbridge initially focused on the visible sell-off of bridged DOT on Ethereum. However, further investigation showed that the attacker first extracted about 245 ETH from Token Gateway. The attacker then moved into a second phase that involved minting about 1 billion bridged DOT tokens.

The attacker minted the tokens without authorization and sold them into available decentralized exchange liquidity. Consequently, the sales pressure deepened losses across supported chains. Hyperbridge confirmed that the exploit centered on its Token Gateway component.

Advertisement

Ethereum, Base, BNB Chain, and Arbitrum Impacted

Security researchers traced the flaw to the Merkle Mountain Range proof verification logic. The vulnerability affected Hyperbridge’s HandlerV1 path and enabled forged cross-chain messages. As a result, the attacker gained control over admin functions tied to the bridged DOT contract.

The attacker used that access to mint fake bridged DOT tokens on Ethereum. The attacker then dumped those tokens into limited liquidity pools. This sequence expanded losses beyond the initial ETH extraction.

Hyperbridge stated that the damage remained isolated to Token Gateway. It confirmed that bridged token contracts on Ethereum, Base, BNB Chain, and Arbitrum were affected. However, it said that Intent Gateway and related products were not impacted.

The team said it traced a large portion of exploited funds to Binance. It added that it works with Binance’s compliance team and law enforcement to freeze and recover assets. Hyperbridge said it plans to allocate BRIDGE tokens if recovery efforts fail.

Advertisement

All Token Gateway bridging remains paused while the team finalizes a patch. Hyperbridge said it will complete an independent audit and add safeguards before resuming operations. It confirmed that it will publish the audit report before restoring full functionality.

Source link

Advertisement
Continue Reading

Crypto World

Charles Hoskinson: Bitcoin Quantum Upgrade Cannot Save Coins

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR

  • Charles Hoskinson said Bitcoin’s quantum proposal would require a hard fork instead of a soft fork.
  • He argued that the plan would invalidate existing signature schemes used by current Bitcoin users.
  • Hoskinson stated that the proposal cannot recover about 1.7 million early mined bitcoin.
  • He said roughly 1.1 million of those coins belong to Satoshi Nakamoto.
  • The proposal suggests users could reclaim frozen funds through zero-knowledge proofs tied to BIP-39 seed phrases.

Cardano founder Charles Hoskinson challenged a new Bitcoin proposal that targets quantum threats. He said the plan would require a hard fork rather than a soft fork. He also argued that the change cannot recover early coins linked to Satoshi Nakamoto.

Bitcoin’s Quantum Proposal Faces Hard Fork Dispute

Bitcoin developers proposed BIP-361 to freeze addresses vulnerable to future quantum computers. They said the change would phase out old signature schemes and protect dormant funds. However, Hoskinson rejected the claim that the plan qualifies as a soft fork.

He stated, “To actually do this, you need a hard fork,” in a YouTube video. He argued that the proposal invalidates signature rules that users still rely on. Therefore, he said old software would stop working unless every participant upgrades.

Developers described BIP-361 as a rule tightening that older nodes could accept. In contrast, Hoskinson said the measure changes core validation standards. He added that Bitcoin culture has long opposed hard forks because they alter network history.

Advertisement

BIP-361 co-author Jameson Lopp addressed the debate on X this week. He wrote that he does not like the proposal and hopes adoption never becomes necessary. He called it “a rough idea for a contingency plan” rather than a final plan.

Satoshi-era Holdings Remain Beyond Recovery

Hoskinson said the plan cannot protect about 1.7 million early bitcoin. He stated that around 1.1 million of those coins belong to Satoshi Nakamoto. He argued that those holdings predate modern wallet standards.

BIP-361 suggests that users could reclaim frozen funds through zero-knowledge proofs. The proof would tie ownership to a BIP-39 seed phrase used in newer wallets. However, Hoskinson said early wallets did not use seed phrases.

He explained that the original Bitcoin software relied on a local key pool. That system generated private keys without a deterministic seed phrase. Therefore, he said no proof based on BIP-39 can verify those older coins.

Advertisement

He said, “1.7 million coins can’t do that. It’s not possible.” He added that migration would require cryptographic proof that early holders cannot produce. As a result, those coins would remain frozen under the proposal.

Lopp estimated that 5.6 million bitcoin sit dormant across the network. He argued that freezing them would prove safer than letting quantum attackers unlock them. He presented the freeze as a protective option rather than a finalized policy.

Source link

Advertisement
Continue Reading

Crypto World

After Kalshi Appeal, Prediction Markets Fight Could Head to Supreme Court

Published

on

Law, CFTC, Court, Kalshi, Prediction Markets

An appellate court is expected to reach a decision after hearing arguments from Kalshi and lawyers representing the state of Nevada.

Some legal experts speculated that the state vs. federal jurisdiction battle over regulating prediction markets companies could soon be headed to the United States Supreme Court.

On Thursday, the US Court of Appeals for the Ninth Circuit heard oral arguments from lawyers representing prediction markets platform Kalshi and Nevada authorities over the state’s ban on the prediction markets’ event contracts. The appeal was over a lower court decision preventing Kalshi from offering certain event-based contracts in Nevada, based on claims that the company needed a gaming license.

Advertisement
Law, CFTC, Court, Kalshi, Prediction Markets
Thursday oral arguments by Kalshi and the State of Nevada. Source: US Court of Appeals, Ninth Circuit

The appellate judge overseeing Thursday’s oral arguments and the lawyer for Kalshi acknowledged that there had been several state-level enforcement actions against the company and other prediction market platforms, including criminal charges filed in Arizona. However, last week a federal court blocked Arizona authorities from enforcing the state’s gambling laws on Kalshi’s event contracts.

“I think the body of case law does demonstrate that what we really need to avoid here is having a state and a federal court considering exactly the same issue at exactly the same time and potentially reaching different outcomes,” said Colleen Sinzdak, representing Kalshi.

Related: CFTC probes oil futures trades tied to Trump’s moves in Iran: Report

Central to Kalshi’s argument was that the platform’s event contracts were “swaps” falling under the purview of the Commodity Futures Trading Commission (CFTC) rather than state gaming authorities. CFTC Chair Michael Selig has backed this position in the case of Crypto.com’s prediction markets against Nevada authorities.

The appellate court did not immediately announce a decision following oral arguments. Any ruling could affect how state courts treat prediction market platforms like Kalshi and Polymarket as policymakers come to terms with the growing market, expected to reach $1 trillion by 2030.

Advertisement

Coinbase’s top lawyer weighs in on prediction market arguments

Coinbase chief legal officer Paul Grewal, whose company was not a party to the Kalshi proceedings but has a stake in the prediction markets fight, speculated that the case could go the US Supreme Court.

“The questions at oral argument are an unreliable signal in predicting the leanings of a court,” said Coinbase chief legal officer Paul Grewal in a Thursday X post following the oral arguments. “Either way, I stand by my longstanding prediction— the Supreme Court will resolve whether sports [contracts] on [Designated Contract Markets] are swaps subject to the exclusive jurisdiction of the CFTC.”

The US Supreme Court gave states the authority to regulate sports gambling in its 2018 decision in Murphy v. National Collegiate Athletic Association.

Advertisement

Magazine: Should users be allowed to bet on war and death in prediction markets?