Lien Finance Loses $542,000 USDC to Bond Exchange Vulnerability

Lien Finance lost approximately $542,000 USDC in July due to a vulnerability in its bond token exchange logic, according to blockchain security firm SlowMist. The attacker exploited the exchangeEquivalentBonds function in the BondMakerCollateralizedEth contract to mint bond tokens without destroying input bonds, then exchanged them for real USDC liquidity. SlowMist stated the attack was possible because bond groups lacked sufficient verification during exchange. On-chain analysis by DefimonAlerts revealed the attacker registered malicious bonds through the protocol, routing them to Lien Finance's OTC pools in exchange for actual liquidity. The attacker's wallet was identified as 0x0d7d…1808a.
Disclaimer: The information on this page may come from third-party sources and is for reference only. It does not represent the views or opinions of Gate and does not constitute any financial, investment, or legal advice. Virtual asset trading involves high risk. Please do not rely solely on the information on this page when making decisions. For details, see the Disclaimer.
Comment
0/400
No comments