The exploit involved the attacker creating a fake tick account on Crema. A tick account is “a dedicated account that stores price tick data in CLMM,” the developers said, referring to Crema’s market-making protocol. After that, the attacker exploited a command by writing the data on the fake account and circumventing security measures.
Related posts
-
DEX Curve Finance Mulls Removing TrueUSD (TUSD) as Collateral for Stablecoin Curve USD (crvUSD)
“WormholeOracle” proposed reducing the upper limit on TUSD backing for crvUSD to zero, meaning that TUSD... -
Lawmaker Introduces Defi Bill — Calls Decentralized Finance ‘Essential to Future of Markets’
Congressman Warren Davidson has introduced the Evaluating Defi Opportunities... -
Curve Finance Proposal Eyes Reducing TUSD Exposure After SEC Settlement
Curve Finance is evaluating a proposal to reduce its...