Orion Protocol Hack

Orion protocol was exploited via reentrancy vulnerability with a profit of about 3M $USD.

Orion Protocol, a decentralized finance (DeFi) protocol that aggregates liquidity from centralized exchanges, recently suffered a reentrancy exploit that resulted in a loss of around $3 million in Ethereum (ETH) on Feb. 2. The attacker used manipulated swaps of flash loaned stablecoins and artificially deposited assets twice before withdrawing the inflated balance. The exploiter also created and used a fake token to double their balance before making off with the stolen loot. Orion CEO Alexey Koloskov said the damage was contained to an internal broker account, and user funds remained safe. Orion has addressed several issues, such as bug fixes and interface changes, and Rekt reported that the $3 million loss has motivated Orion to take a more controlled approach.

After the attack, 1100 ETH were sent through the tornado cash mixer and 657 ETH are still held in the attacker's balance on the Ethereum network.

Exploit TX:

https://bscscan.com/tx/0xfb153c57…2e2104

Exploiter addresses:

https://bscscan.com/address/0x837962b6…0484bd

https://bscscan.com/address/0x3dabf5e3…9e35f1

https://etherscan.io/address/0x3dabf5e3…9e35f1

Attacker contract:

https://bscscan.com/address/0x84452042…079b67

Example of tornado cash TX:

https://etherscan.io/tx/0xa3fd4f4c…d845cb