La bóveda de liquidez de Clober ha sido explotada por 133 ETH, el equipo ofrece recompensa de sombrero blanco
Clober, un mercado descentralizado en Base, ha sido explotado por 133 ETH. El equipo ofreció al sombrero blanco una tarifa del 20% para recuperar el acceso a los fondos.
Una de las bóvedas de liquidez de Clober, un DEX en la cadena Base, sufrió recientemente un exploit. El hacker logró retirar 133 ETH envueltos en una sola transacción.
🚨 URGENTE: Alerta de violación de seguridad 🚨
Lamentamos informar a nuestra comunidad que Clober Liquidity Vault se ha visto comprometida por una violación de seguridad.
Queremos asegurarles a nuestros usuarios que el protocolo Clober en sí no se ve afectado y que todas las funcionalidades principales continúan funcionando...
- Clober | CLOB DEX totalmente en cadena (@CloberDEX) 10 de diciembre de 2024
After the exploit, the funds were bridged back to the Ethereum main chain, which has a lot of paths for mixing or trading.
The protocol claimed no other features of the protocol were unaffected, and did not make any call for users to take any further extra steps.
Base is one of the relatively safer chains with few reported exploits. However, the growth of its DeFi sector has increased the frequency of attempts to steal valuable funds. As with other exploits, scammers may try to post phishing links attempting to drain wallets.
In addition to Base, Clober has built an Arbitrum version, which remains unaffected by the hack. Clober Core and the Mitosis testnet are also safe and will not be frozen or stopped.
The vault in question has been drained, and no other funds are at risk. The Clober V2 vault is still operational and is currently building up its value locked, based on Messari data. That vault contains a little over $17K.
Despite the call for a white hat fee, the hacker retained the funds. The team contacted the hacker directly through the Ethereum chain with a message to resolve the issue.
The project is working with Match Systems for a potential white hat solution, where the hacker receives a fee but returns most of the liquidity.
Hacker used burn function flaw to steal funds
To complete the exploit, the Clober hacker deposited just 2.87 ETH from Binance. After withdrawing the funds, they moved through the Across protocol bridge, ending up on two Ethereum addresses.
The two addresses (1 & 2) were created specifically for the bridge transaction to take the funds out of Base and onto the Ethereum mainnet.
According to PeckShield, the hack was possible due to issues with the burn function, which allowed the withdrawal call.
Clober offered fully on-chain order books
Clober is still an early-stage protocol with relatively low liquidity. Its liquidity vault is now practically empty. The protocol also onboarded the liquidity as late as December 9, based on DeFi Llama data. The hack happened a day later, suggesting the hacker may have been closely following the protocol.
The past few days saw similar exploits for relatively small sums. The recent events have exploited logic flaws in smart contracts, leading to relatively easy attempts to drain funds.
The recent exploit happened just days after Clober completed an audit of its smart contracts. It hired Kupia Security for the audit, a firm known for multiple bug bounties for high-profile projects.
Just days before that, Clober also advertised its liquidity vault approach, which aimed to smooth out DEX activity and swaps. At the time, it boasted that its $500K liquidity could generate volumes of $1.2M in 24 hours, serving to complete trades more efficiently. It was precisely this available liquidity that the exploiter carted away.
The Clober liquidity vault was first launched on Base just over a week ago, with the goal of replacing the usual Automated Market Makers (AMM) for DEX trades. Clober was also highly active with its promotion, specifically drawing attention to its targeted liquidity approach and the potential for high volumes.
Clober launched just after Base had achieved a new record in value locked, with its DeFi sector now carrying $3.86B in TVL. Clober aims to offer a model similar to Aerodrome, where targeted liquidity achieves much higher volumes, by targeting the most common price range for traders.
Land a High-Paying Web3 Job in 90 Days: The Ultimate Roadmap
Artículos Relacionados
La cartera 2025 de Warren Buffett: Un gigante defensivo que equilibra las apuestas heredadas con la disciplina estratégica
A 31 de marzo de 2025, Berkshire Hathaway de Warren Buffett mantiene una cartera de acciones de 258.700 millones de dólares repartida en 36 valores.
¿Cuál es el futuro de las stablecoins? Algunos valores de Stablecoin a tener en cuenta
La reciente evolución legislativa en Estados Unidos y Hong Kong ha puesto a las stablecoins en el punto de mira financiero.
¿Es Ripple (XRP) la mejor altcoin para invertir para 2025 Summer? 2 mejores selecciones
Con el calentamiento del verano 2025, la pregunta en la mente de cada inversor es, ¿cuál es la mejor criptografía para comprar en 2025? Ripple (XRP) ha vuelto a ser el centro de atención, con fundamentos StronG y renovado optimismo de la reciente claridad regulatoria. Cerca de alrededor de $ 0.52...
Los saldos de Bitcoin en Exchange alcanzan mínimos históricos: ¿a qué espera el mercado?
Los saldos de Bitcoin en Exchange alcanzan mínimos históricos mientras los inversores se mantienen estables.
Aranceles de Trump o no: ¿se avecina una Trumpcesión?
El domingo, cuando le preguntaron si esperaba una recesión este año, el presidente estadounidense Donald Trump respondió: «Odio predecir cosas así. Hay un periodo de transición, porque lo que estamos haciendo es muy grande.
