Liquidity issues affected users on two decentralized finance (DeFi) platforms today, though for different reasons and with widely differing consequences.
In what appears to be user error, three sizable swaps of 220,000, 131,000, and 91,000 of Circle’s USDC stablecoin netted a total of just over 10,000 tethers (USDT) after falling victim to a maximum extractable volume (MEV) bot.
The swaps, made via the Uniswap V3 decentralized exchange, were flagged by blockchain security firm Peckshield, which regularly alerts the DeFi community to hacks, phishing attacks, and suspicious transactions.
Read more: MEV bot to return $7.5M if Rho Markets admits to oracle error
While the three affected transactions all come from distinct addresses, a brief look at their transaction histories indicates they are likely to be from the same individual.
In all three cases, the tokens used in the swaps were withdrawn from the DeFi lending platform Aave’s $1.2 billion USDC pool around seven hours previously. USDT was also withdrawn but not swapped.
MEV bots ready to pounce
MEV bots scan Ethereum’s mempool, the list of pending transactions, looking for opportunities to profit from the actions of other users.
Typically, this involves sending a transaction before the victim’s in order to manipulate the price of assets in the liquidity pool via which assets are swapped on a decentralized exchange such as Uniswap.
In this case, the bot’s front-run transaction swapped 18 million USDC, increasing the price of USDT within the pool by a factor of 44. The victim’s original transaction then goes through, and finally, the bot back-runs the victim, clearing approximately $200,000 profit.
Trades are usually protected via “slippage” settings, which define a minimum amount of tokens to be received or the transaction reverts. However, for these swaps, the amountOutMinimum parameter was set to zero.
Read more: Ethereum Foundation denies rumors of Maker liquidation
#MEVDEFIATTACK #hackattack #mevattack DAILY SIGNAL UPDATE AND SIGNALS FOLLOW UP PAGE😎📊