Deus Finance is a multi-token decentralized finance (DeFi) marketplace.
The hacker behind the attack then funneled the stolen funds using the coin mixer tool Tornado cash with the Multichain Protocol (previously known as AnySwap).
$11M stolen from @saddlefinance, plus $3.8M rescued by BlockSec.
Despite claiming that “user funds are safe”, Saddle later clarified they were only referring to the amount that was not stolen.
The $11M however, is not safe at all.
— rekt (@RektHQ) May 1, 2022
The loss to the protocol was likely larger than what the hacker was able to withdraw from the platform. And Deus announced that no users had been liquidated and that “the loss is on the protocol”.
They suffered a similar hack attack last month in which over 3 million were stolen. The first exploit resulted in over $3.1 million in losses in the Dai (DAI) and Ether (ETH).
Deus implemented an immediate reimbursement plan for users who were liquidated in the incident.
According to Lafayette Tabor, the CEO of Deus Protocol, the exploit in this incident was not the same one used in the previous attack.
He wrote on Twitter that the exploit was “the first of its kind, a zero-day exploit on Solidly (decentralized crypto exchange) swaps”.
