OlympusDAO Hack

OlympusDAO exploited by WhiteHat for 315,328 $USD via logic issue of the Bond Protocol contracts

OlympusDAO is a DAO backed by $OHM tokens and running on the Ethereum chain. The Bond Protocol contract, which hold 315,328 $USD worth of $OHM tokens were siphoned out by the WhiteHat hacker. BondFixedExpiryTeller contract had no additional security check, which allowed the attacker to drain the assets. All the stolen amount were returned by the hacker to OlympusDAO Funds

contract.

Attacker address:

https://etherscan.io/address/0x443cf223…c7d9be

Malicious transaction:

https://etherscan.io/tx/0x3ed75df8…1504cf

Returning transaction:

https://etherscan.io/tx/0xdca75841…f6205f

Malicious contract:

https://etherscan.io/address/0xa29e4fe4…a4de8f