Nirvana V1 Hack

TOTAL LOST $3.5M
Medium Flash Loan Attacks solana

What happened

Nirvana Finance became the victim of a flash loan attack during which the liquidity pools of the protocol were depleted. The Solana-based Nirvana protocol suffered losses of $3.5M.

Nirvana is a sustainable mechanism of wealth creation due to the growing minimum price. The $ANA and $NIRV token functioned as a balance between profitability and risk.

Nirvana Finance has been subjected to a flash loan attack on the Solana network. The attacker took a flash loan during which he managed to manipulate the price and change the value of $ANA from $8 to $24.27 per transaction. Using the Solend Protocol , the attacker borrowed 10M $USDC which were used for exploiting Nirvana. He minted $ANA in worth of 10M $USDC then swapped $ANA for $USDT taking a profit of $3.5M which then were bridged through the Wormhole Bridge into the Ethereum network. At the moment of this writing all the stolen funds are sitting on the attacker's account.

Involved addresses:

Scammer addresses:

(ETH) https://etherscan.io/address/0xb9ae2624ab08661f010185d72dd506e199e67c09

(Sol) https://solscan.io/account/62o4UiW394…pm7PRR

(Sol) https://solscan.io/account/76w4SBe2of…SbTAWH

Nirvana Treasury address (Sol): https://solscan.io/account/CxuuSEv67P…QSJnaG

Transactions:

Flash-loan: https://solscan.io/tx/LyUnvdY9KB…tAoeR5

Bridging tokens through the Wormhole:

  1. Tx
  2. Tx

Case & protocol details

Classification Ecosystem / Oracle Manipulation / Stablecoin
Protocol Type CDP
Affected asset / contract ANA
Smart Contract Language Rust
Official Website www.nirvana.finance/
Protocol Twitter/X @nirvana_fi

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.