BlockThreat - Week 21, 2022

Terra | Mirror Protocol | Moonbirds | Off the Chain

Greetings!

Terra continues causing a mess now with bad price oracles generating even more bad debt. Details of a quietly patched Mirror Protocol vulnerability that cost them $90M last year. Solana community helped trap scammers by collaborating with an NFT marketplace to prevent them from making a profit.

---

Enjoy reading BlockThreat? Consider sponsoring the next edition or becoming a paid subscriber to unlock the premium section with indicators, special reports, and searchable newsletter archives.

---

Events

• Off the Chain is happening on June 7, 2022 in San Francisco, CA including a number of CTF competitions.

• SANS Blockchain Security Summit 2022 on August 31, 2022.

News

• Luna investor arrested for knocking on Do Kwon’s door.

• A $90 million DeFi exploit on Terra went unnoticed for seven months.

Scams

• Scammer stole $1.5M worth of Moonbirds using a fake exchange.

• Hacker tastes own medicine as community gets back stolen NFTs by working with a NFT marketplace.

• Cryptocurreny Giveaway Scam with YouTube Live Stream.

Hacks

• On May 30, 2022, Mirror Protocol and Anchor Capital lost combined $2.8M+ due to faulty Luna price oracles.

Other Incidents

• Ethereum Beacon chain suffers a reorg due to outdated clients.

• Solana chain restarted after on-chain timestamp was desynced.

Research

• The Dark Side of DeFi: Cross-Chain Bridge Hacks by Quantstamp.

• DoS Attacks on Blockchain Ecosystem.

• Forensic Artefact Discovery and Attribution from Android Cryptocurrency Wallet Applications.

• On-Chain Forensics: Demystifying TerraUSD De-peg by Nansen