The attacker used an unverified contract to borrow 1,100 Lido Staked Ether, which may have been used to manipulate prices and drain funds from the protocol.
Web3 lending app and yield aggregator Wise Lending was drained of 170 Ether (ETH), worth $440,000 at current prices, in an apparent exploit on Jan. 12, according to multiple security experts. The exploiter may have manipulated an oracle price through a flash loan in order to carry out the exploit.
Blockchain data shows that the attack took place at 07:29 pm UTC. The attacker used an unverified contract with an address ending in d82c to drain the funds. Multiple tokens were transferred into this contract, including $9,000 worth of USD Coin (USDC), $2,000 worth of Tether (USDT), $5,000 worth of DAI, 18.51 Wrapped Ether (WETH) ($47.694), and numerous Pendle Finance associated tokens.
The attacker borrowed 1,110 Lido Staked Ether (stETH) tokens ($2.9 million) from AAVE lending protocol as part of the exploit. Exploiters often use flash loans to manipulate oracle prices.
