Incident Overview
On October 24, 2024, Essence Finance's stablecoin CHI in the Scroll ecosystem dropped 98% in value, sparking significant investor concerns and accusations of a potential rug pull. Reports of sudden, multimillion-dollar collateral withdrawals intensified suspicions.
Essence Finance’s stablecoin CHI faced a severe crash in the Scroll ecosystem, dropping 98% in value, amid suspicions of a rug pull. This turmoil stemmed from sudden multimillion-dollar withdrawals, prompting fears and distrust among investors. Adding to the controversy, the project’s communication channels have been largely silent since September, intensifying speculation. Meanwhile, CHI’s trading volume remains active, showing lingering interest despite the sharp price decline.
Essence Finance’s stablecoin project has faced scrutiny for its centralized design, where a multisig wallet, controlled by select project members, could manage and operate collateral assets. During the incident, the multisig wallet was used to drain the CHI minter contract and shift substantial collateral into USDC/CHIUSD and DAI/CHIUSD pairs. This centralized control over collateral allowed the operators to restrict redemptions, blocking users from accessing their CHI holdings. With CHI’s stability already fragile due to a small depeg, this inability to redeem triggered a liquidity crisis resembling a bank run, leading to the drastic price collapse.
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Essence Finance, these are the critical security checks that could have prevented this incident (October 2024).
- Verify all logic paths related to Other are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSources & References
- 01
- 02
- 03
- 04
Learn to Prevent the Next Essence Finance
The Essence Finance hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.