Key Takeaways

  • Origin Protocol suffered a flash loan attack last night, leading to losses of $7 million.
  • The Origin Protocol team has announced its plans to compensate affected users. An investigation into the incident is ongoing.
  • Attack is the latest in a string of multi-million dollar losses resulting from flash loan exploits.

Share this article

Origin Protocol has been drained of $7 million. The incident occurred late last night as part of a sophisticated attack involving a 70,000 ETH flash loan.

Origin’s co-founder Matthew Liu took to Twitter to share details of the attack, urging users to avoid buying or minting OUSD. OUSD is Origin’s native token. It is a stablecoin roughly pegged to the U.S. dollar, and it’s designed to provide yield to its holders.

But following last night’s attack, the token’s value plummeted 85% to around $0.14. The sudden price drop has left anyone with significant OUSD holdings facing substantial losses. 

Origin Protocol has posted an initial synopsis of the incident.

After borrowing over $32 million worth of ETH, the attacker took advantage of a reentrancy bug in Origin’s contract. They successfully executed a rebase event to increase the supply of OUSD before swapping their takings on Uniswap and Sushiswap.

A rebase event is essentially a process in which an asset’s reserves are increased. It’s an innovation that’s been embraced in DeFi recently, though not always with positive results. In August, Yam Finance memorably suffered a catastrophe partly as a result of its rebasing mechanism. 

The attacker’s steps can be followed on Etherscan

Origin attacker on Etherscan
Source: Etherscan 

The Origin team has stated that it will be investigating the incident in the coming days. They have also confirmed their plans to recover the funds and compensate affected OUSD holders.

A statement on Origin’s Medium blog reads as follows: 

“We will be taking exhaustive measures in the next few days in an attempt to recover lost user funds before discussing a compensation plan for affected OUSD holders. As a reminder, please do not buy OUSD on Uniswap or Sushiswap as the current prices do not reflect OUSD’s underlying assets.”

Origin has also sent thanks to the wider DeFi community for their help in dealing with the fallout from the incident, as well as a plea to the attacker. “We humbly ask you to consider the hundreds of innocent people you are hurting and return the funds,” they said. 

Since the attack, several users have sent on-chain messages to the perpetrator asking them to return some of the takings. One message read:

“Hi! Great job on your successful flash loan arbitrage. This is a long shot, but I lost ~$1k due to it, and I figure no harm in asking if you could please send me some $$ to reduce my loss?
Would mean a lot to me and my student loans. Although you’re under no obligation to do so.
Thank you.”

The victim’s message is available to view on Etherscan.

The attacker’s address also shows that they have converted some funds to RenBTC over the last few hours. They also moved hundreds of ETH through Tornado.cash, a tool that helps users preserve anonymity on the Ethereum network.

Of course, Origin’s attacker isn’t the only DeFi expert to successfully execute a flash loan and end up making off with millions of dollars.

Last night’s incident is only the latest example in a string of large-scale attacks following recent exploits on Harvest, CheeseBank, Akropolis, and Value DeFi. 

Share this article

704 COMMENTS

  1. [url=https://vhodnaja-metallicheskaja-dver.ru/]Входные двери в Москве[/url]

    Коробка двери – 100 мм, кривой Г-образный профиль, лист 1,5 мм, Фасады – электростатическая порошковая глазурь; Дверное полотно – металлическая механизм, полностью утепленная минеральной ватой толщиной 80 мм, металлическим листом 1,5 мм. Болты противовзломные -2 шт. Умножение дверного полотна. Несущие петли – 2 шт. O27 мм. Готово : Внешняя страна – плиты МДФ, ламинированные пленкой ПВХ (толщина 10 мм). Декоративная плита МДФ – 80 мм сообразно периметру; Внутренняя страна – плиты МДФ, ламинированные пленкой ПВХ (толщина 10 мм); Чертеж – справочник; Цвета – каталог. Обстановка : Замки : основная (нижняя) – Кале 252; дополнительный (высокий) – Kale 257RL / 257R Защитная обивка + таз. Древко для розетке. Дверь Иуды. Уплотнение: Два контура в дверном полотне + один контур в дверной направляющей.

    Входные двери в Москве

  2. Howdy! This post could not be written any better!
    Looking through this post reminds me of my previous roommate!
    He constantly kept preaching about this. I most certainly will send this
    post to him. Fairly certain he’ll have a very good read.
    Thank you for sharing!

  3. Simply desire to say your article is as amazing. The
    clarity in your post is just great and i could assume you’re an expert on this subject.

    Well with your permission let me to grab your RSS feed to
    keep updated with forthcoming post. Thanks a million and please carry on the gratifying work.

  4. It’s the best time to make a few plans for the longer term and it is time
    to be happy. I have learn this publish and if I could I
    want to counsel you some fascinating issues or advice.
    Maybe you can write subsequent articles regarding this article.
    I want to learn even more issues about it!

  5. Great post. I used to be checking continuously this weblog and I’m inspired! Very helpful information specifically the closing part 🙂 I handle such info a lot. I was looking for this particular information for a long time. Thank you and best of luck.

  6. Its such as you learn my mind! You seem to know a lot about this, such as you wrote the e-book in it or something.
    I feel that you simply can do with a few p.c.
    to drive the message home a little bit, but instead of that, this is wonderful blog.

    A great read. I will certainly be back.

  7. Woah! I’m really enjoying the template/theme of
    this blog. It’s simple, yet effective. A lot of times
    it’s challenging to get that “perfect balance” between usability and visual
    appearance. I must say you have done a superb job with this.
    Also, the blog loads very quick for me on Chrome.

    Outstanding Blog!

  8. Link exchange is nothing else except it is just placing the other person’s blog link on your page at proper place and other person will also do similar in support of you.

  9. My programmer is trying to persuade me to move to .net from PHP.
    I have always disliked the idea because of the costs.
    But he’s tryiong none the less. I’ve been using
    Movable-type on several websites for about a year and am
    anxious about switching to another platform.
    I have heard great things about blogengine.net. Is there
    a way I can import all my wordpress content into it? Any help would be greatly
    appreciated!

  10. It’s appropriate time to make some plans for the future and it is time
    to be happy. I have read this post and if I could I desire to suggest you few interesting things
    or advice. Perhaps you could write next articles referring to this
    article. I desire to read more things about it!

  11. Instagram türk takipçi almak ve bu sektör de
    en ön sıralara gelerek fenomen olabilme şansını kazanmak.

    türk takipçi Almadan bu platformlar da satış yapmak
    zordur bunlar için bir kaç şart vardır.

    1. Hesaptaki gönderiler hem farklı olmalı hem de aksatmadan paylaşılmalıdır.

    Bu platformda sadece takipçi satın alıp, gönderilere özen göstermeyerek başarı kazanmak imkansızdır.
    Başarı için her gün düzenli olarak paylaşım yapılmalı ve bu
    kapsamda analizler gerçekleştirilmelidir.

    Zira bu durumda %100 keşfete düşme garantisi kazanılacaktır.

    2. Belirtilen faydalardan yararlanabilmek için takipçi niteliği gerçek kullanıcılardan oluşmalı.
    Zira algoritma sadece gerçek kullanıcıların işlemlerini etkileşim olarak nitelendirir ve bu kapsamda hesabın keşfete düşmesini sağlar.

    Şayet bu faydalar vasıtasıyla fenomenlik yolunuzu başarı ile sonuçlandırmak istiyorsanız
    Takip2018 doğru adresiniz olacaktır. Müşteri yorumlarından paketlerin kalite içeriğine kadar tüm gerekli özellikleri barındıran kurum, bireylere uzun vadeli başarı garantisi sunuyor.

  12. En ucuz ve kaliteli siteden uygun fyatlara satın alabilmek için takip2018 in bütün faydalarından hemen faydalanabilirsiniz,
    Türk takipçi paketleri 1000 adet takipçiden başlayarak 100bin takipçiye kadar
    alabilirsiniz.
    100bin takipçiyi sadece 12 saat içerisinde profilinize yükleyebiliyorlar.

    Takipçi Satın Al sitesinden takipçi almak için hemen takip2018.com a giderek
    alın.

  13. Hi! This is my first comment here so I just wanted to give a quick shout out and tell you I truly
    enjoy reading your blog posts. Can you suggest any other blogs/websites/forums that deal with the
    same subjects? Many thanks!

  14. Sizinle büyük bir sır paylaşıyorum hemen profilimde bulunan siteye girerek
    takipçi sayısınızı kimsenin anlamayacağı şekilde yükseltebililrsiniz.
    Takipçi sayısı arttırmak için yukarıdaki linke tıklayın ve
    satışlarınıza büyük oranda katkı payı sağlayın.

  15. I’m truly enjoying the design and layout of your blog.
    It’s a very easy on the eyes which makes it much more pleasant for me to come here and visit more often. Did you hire out a designer to create your theme?
    Outstanding work!

LEAVE A REPLY

Please enter your comment!
Please enter your name here