According to PeckShield, Decentralized finance (DeFi), Nirvana Finance, producing protocol on Solana, has suffered a flash loan exploit to the tune of about $3.5 million.
Nirvana’s native token ANA and its stablecoin NIRV suffered huge price falls due to the attack. ANA slipped 89% from $8.97 to $0.93 while the stablecoin has lost 90% of its US dollar value in the process.
On-chain data demonstrates the attacker used a $10 million flash loan in USDC to mint $10 million worth of ANA tokens. Flash loans let you derive large amounts of capital at low cost, as long as the loan is repaid in the same block. This flash loan was protected by the Solend Protocol.
The attacker then deployed the protocol’s oracle feed thereby inflating the price of ANA coins so that their holdings exceeded $10 million. The attacker then exchanged what was actually $10 million in ANA tokens for $13.49 million in USDT.
This action drained $3.49 million from the Nirvana treasury. The exploit has since repaid the initial $10 million loan and has bridged the profit to this Ethereum wallet address via Wormhole and transformed it to the DAI stablecoin.
Nirvana has not released an official statement about the exploit yet. The protocol did not instantly respond to The Block’s request for comments. Solend has released a statement that it is aware of the incident and is in touch with the Nirvana team while also adding that its protocol was not affected by the exploit.
DeFi protocols across many networks are often a target for flash loan attacks. For example. Beanstalk, an Ethereum stablecoin project, lost $182 million in April in the largest flash loan exploit recorded in the crypto space.
Leave a Reply