Orion Protocol Hack

Orion protocol was exploited via reentrancy vulnerability with a profit of about 3M $USD.

Orion Protocol, a decentralized finance (DeFi) protocol that aggregates liquidity from centralized exchanges, recently suffered a reentrancy exploit that resulted in a loss of around $3 million in Ethereum (ETH) on Feb. 2. The attacker used manipulated swaps of flash loaned stablecoins and artificially deposited assets twice before withdrawing the inflated balance. The exploiter also created and used a fake token to double their balance before making off with the stolen loot. Orion CEO Alexey Koloskov said the damage was contained to an internal broker account, and user funds remained safe. Orion has addressed several issues, such as bug fixes and interface changes, and Rekt reported that the $3 million loss has motivated Orion to take a more controlled approach.

After the attack, 1100 ETH were sent through the tornado cash mixer and 657 ETH are still held in the attacker's balance on the Ethereum network.

Exploit TX:

Tx 0xfb15…2104

Exploiter addresses:

Address 0x8379…84bd

Address 0x3dab…35f1

Address 0x3dab…35f1

Attacker contract:

Address 0x8445…9b67

Example of tornado cash TX:

Tx 0xa3fd…45cb