Sovryn Hack

Sovryn Protocol's RBTC and USDT lending pools have been exploited by price manipulation. The attacker profited for 1,078,000 $USDT worth of assets as $RBTC and $USDT.

Sovryn is the protocol that provides trading and lending opportunities on the Layer 2 Bitcoin-based RSK chain. The protocol's $RBTC and $USDT lending pools were exploited and the attacker took away 44,93 $RBTC and 211,045 $USDT. The attacker exploited price calculation logic to withdraw more $RBTC than usual.

Devs managed to recover roughly half of the stolen assets through a combined effort at the moment.

Attacker address:

https://explorer.rsk.co/address/0xc92ebecd…97531a

Malicious contract:

https://blockscout.com/rsk/mainnet/address/0xA893cdcb…96b0A6

Malicious transaction example:

https://explorer.rsk.co/tx/0xf5ea6266…1582e2