Euler Finance exploiter returns another $37.1M worth of ETH and DAI

The designer of the March 13 Euler Finance exploit returned an further $26.5 cardinal worthy of Ether (ETH) to the Euler Finance deployer relationship connected March 27, on-chain information shows.

At 6:21 p.m. UTC, an code associated with the attacker sent 7,738.05 ETH (worth astir $13.2 cardinal astatine the clip it was confirmed) to the Euler deployer account. In the aforesaid block, different code associated with the attacker sent an identical magnitude to the aforesaid deployer account, for a full of 15,476.1 ETH (around $26.4 million) returned to the Euler team.

Then, astatine 6:40 p.m. UTC, the archetypal wallet sent different transaction to the deployer relationship for $10.7 cardinal worthy of Dai (DAI) stablecoin. This brings the full of each 3 transactions to astir $37.1 million.

Both of these addresses person received funds from the relationship that Etherscan labels “Euler Finance Exploiter 2,” which seems to connote that they are nether the power of the attacker.

These transactions follow a erstwhile return of 58,000 ETH (worth implicit $101 cardinal astatine the time) connected March 25. In total, the attacker appears to person returned implicit $138 cardinal worthy of crypto assets since the exploit.

Ethereum-based crypto lending protocol Euler Finance was exploited connected March 13, and implicit $195 cardinal worthy of ETH and tokens were drained from its astute contracts. Several protocols wrong the Ethereum ecosystem depended connected Euler successful 1 mode oregon another, and astatine slightest 11 protocols person announced that they person suffered indirect losses from the attack.

According to an investigation by Slowmist, the exploit occurred due to the fact that of a faulty relation that allowed the attacker to donate their lent DAI to a reserve fund. By making this donation, the attacker was capable to propulsion their ain relationship into insolvency. A abstracted relationship was past utilized to liquidate the archetypal relationship astatine a steep discount, allowing the attacker to nett from this discount.

After draining DAI done this archetypal attack, the attacker past repeated it for aggregate tokens, removing implicit $196 cardinal from the protocol.

Funds stolen from Euler Finance. Source: BlockSec