Rho Markets Hit by $7.5M Hack, Attackers Demand Admission of Oracle Error for Fund Return

CoinMarketCap07-26

Rho Markets, a scroll-based money market, suffered an exploit that resulted in a loss of over $7.5 million. The incident saw the perpetrator drain 2,203 ETH in just nine minutes. Following the breach...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2454328101?lang=en_US&edition=fundamental","thumbnail":"https://academy-public.coinmarketcap.com/srd-optimized-uploads/f262f7d961394dc2aa9abfd4d14c4ed9.webp","is_english":true,"pubTime":"2024-07-26 21:34","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2454328101","market":"us","top_or_hot":-1,"title":"Rho Markets Hit by $7.5M Hack, Attackers Demand Admission of Oracle Error for Fund Return","media":"CoinMarketCap","content":"<div>\n<p>Rho Markets, a scroll-based money market, suffered an exploit that resulted in a loss of over $7.5 million. \nThe incident saw the perpetrator drain 2,203 ETH in just nine minutes. Following the breach...</p>\n\n<a href=\"https://coinmarketcap.com/community/articles/66a3a5fdbcf46311739f51d4/\">Source Link</a>\n\n</div>\n","source":"coinmarketcap_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Rho Markets Hit by $7.5M Hack, Attackers Demand Admission of Oracle Error for Fund Return</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nRho Markets Hit by $7.5M Hack, Attackers Demand Admission of Oracle Error for Fund Return\n</h2>\n\n<h4 class=\"meta\">\n\n\n2024-07-26 21:34 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://coinmarketcap.com/community/articles/66a3a5fdbcf46311739f51d4/><strong>CoinMarketCap</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Rho Markets, a scroll-based money market, suffered an exploit that resulted in a loss of over $7.5 million. \nThe incident saw the perpetrator drain 2,203 ETH in just nine minutes. Following the breach...</p>\n\n<a href=\"https://coinmarketcap.com/community/articles/66a3a5fdbcf46311739f51d4/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"LU1035773651.USD","symbol_name":"AB SICAV I - GLOBAL VALUE PORTFOLIO \"AD\" (USD) INC","start_time":0,"source_url":"https://coinmarketcap.com/community/articles/66a3a5fdbcf46311739f51d4/","article_id":"2454328101","we_media_id":null,"thumbnails":["https://academy-public.coinmarketcap.com/srd-optimized-uploads/f262f7d961394dc2aa9abfd4d14c4ed9.webp"],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2454328101","pubTimestamp":1722000892,"sourceInfo":{"source_id":"coinmarketcap_highlight","name":"CoinMarketCap"},"weMediaInfo":null,"summary":"Rho Markets, a scroll-based money market, suffered an exploit that resulted in a loss of over $7.5 million. The incident saw the perpetrator drain 2,203 ETH in just nine minutes. Following th","collect":0,"end_time":0,"defaultTopTitle":"coinmarketcap.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"LU1035773651.USD":"AB SICAV I - GLOBAL VALUE PORTFOLIO \"AD\" (USD) INC","LU0738911758.USD":"Blackrock Global Equity Income A6 USD","LU1366333091.USD":"FIDELITY GLOBAL FOCUS \"A\" (USD) ACC","BK4516":"特朗普概念","BK4528":"SaaS概念","LU1201861249.SGD":"Natixis Harris Associates US Equity PA SGD-H","LU0256863811.USD":"ALLIANZ US EQUITY \"A\" INC","LU0965509101.SGD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"A\" (SGDHDG) ACC","LU1069347547.HKD":"AB SICAV I - GLOBAL VALUE PORTFOLIO \"AD\" (HKD) INC","LU0980610538.SGD":"Natixis Harris Associates US Equity RA SGD-H","IE00BLSP4452.SGD":"Legg Mason ClearBridge - Tactical Dividend Income A Mdis SGD-H Plus","IE00BLSP4239.USD":"Legg Mason ClearBridge - Tactical Dividend Income A Mdis USD Plus","ORCL":"甲骨文","BK4585":"ETF&股票定投概念","LU0417517546.SGD":"Allianz US Equity Cl AT Acc SGD","IE00B19Z3581.USD":"Legg Mason ClearBridge - Value A Acc USD","LU0889565833.HKD":"FRANKLIN TECHNOLOGY \"A\" (HKD) ACC","LU1506573853.SGD":"MANULIFE GF GLOBAL EQUITY \"AA\" (SGD) INC","LU0208291251.USD":"FRANKLIN MUTUAL U.S. VALUE \"A\" (USD) INC","IE00BN8TJ469.HKD":"FTGF CLEARBRIDGE TACTICAL DIVIDEND INCOME \"A\" (HKD) INC","LU1935043536.SGD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME \"AA\" (SGDHDG) INC A","LU1803068979.SGD":"FTIF - Franklin Technology A (acc) SGD-H1","LU0719512351.SGD":"JPMorgan Funds - US Technology A (acc) SGD","LU1037948897.HKD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"AD\" (HKD) INC","IE00BMPRXR70.SGD":"Neuberger Berman 5G Connectivity A Acc SGD-H","LU1935042991.SGD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME  \"AA\" (SGDHDG) INC","BK4538":"云计算","IE00BMPRXN33.USD":"NEUBERGER BERMAN 5G CONNECTIVITY \"A\" (USD) ACC","BK4588":"碎股","LU1037948541.HKD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"A\" (HKD) ACC","LU0109392836.USD":"富兰克林科技股A","LU0965509010.AUD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"AD\" (AUDHDG) INC","LU0661504455.SGD":"Blackrock Global Equity Income A5 SGD-H","LU0175139822.USD":"AB FCP I Global Equity Blend A USD","LU1489326972.SGD":"First Eagle Amundi International AHS-MD SGD-H","LU0320765489.SGD":"FTIF - Franklin Mutual US Value A Acc SGD","BK4097":"系统软件","LU0070302665.USD":"FRANKLIN MUTUAL U.S. VALUE \"A\" (USD) ACC","LU1935043023.USD":"MANULIFE GF GLOBAL MULTI-ASSET DIVERSIFIED INCOME \"AA\" (USD) INC A","BK4581":"高盛持仓","LU0965508806.USD":"AB LOW VOLATILITY EQUITY PORTFOLIO \"AD\" (USD) INC","LU2326559502.SGD":"Natixis Loomis Sayles US Growth Equity P/A SGD-H","LU2236285917.USD":"ALLIANZ GLOBAL INCOME \"AMG\" (USD) INC","LU0949170772.SGD":"Blackrock Global Equity Income A6 SGD-H","IE00B7SZLL34.SGD":"Legg Mason ClearBridge - Value A Acc SGD-H","LU0157215616.USD":"FIDELITY GLOBAL FOCUS \"A\" INC","LU0198837287.USD":"UBS (LUX) EQUITY SICAV - USA GROWTH \"P\" (USD) ACC","LU0289960550.SGD":"AB FCP I - GLOBAL EQUITY BLEND PORTFOLIO 'A' (SGD) ACC","LU0861579265.USD":"联博低波幅策略股票基金A"},"translate_title":"Rho Markets遭受750万美元黑客攻击，攻击者要求Oracle承认错误以返还资金","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ORCL":1},"content_text":"Rho Markets, a scroll-based money market, suffered an exploit that resulted in a loss of over $7.5 million. \nThe incident saw the perpetrator drain 2,203 ETH in just nine minutes. Following the breach, Rho Markets paused blockchain finality to assess if the issue was specific to their application. \n\n\"We’ve detected unusual activity on our platform and are currently investigating it,” the team announced on its X account.\n\nExploit Mechanics\nThe attacker exploited a vulnerability in Rho Markets’ oracle system. Oracles are critical as they provide off-chain data to smart contracts. By manipulating the oracle, the hacker drained the protocol’s entire supply of USDT and USDC stablecoins. They withdrew more than double the posted collateral in Ether.\nBlockchain security firm Cyvers initially suspected ‘Oracle access control by a malicious actor’ as the root cause. This was later confirmed by BlockSec, which noted a strange ownership transfer of the Oracle contract. On-chain detective ZachXBT suggested there was a high probability of fund recovery due to the attacker’s exposure to centralized exchanges.\nData from Debank confirmed that the $7.5 million in Ether remained in the attacker’s wallet at the time of reporting. The exploit was highlighted by an X user who linked to the attacker’s address, revealing a gain of $7.5 million.\nHacker's Demands\nIn a surprising turn, the attacker, operating an MEV bot, offered to return the funds. The condition: Rho Markets must publicly admit to an oracle misconfiguration error. The attacker communicated via an on-chain message on the Ethereum mainnet:\n\n\"Hello RHO team, our MEV bot have profited from your price oracle misconfiguration. We understand that the funds belong to the users and are willing to fully return. But first we would like you to admit that it was not an exploit or a hack, but a misconfiguration on your end. Also, please provide what are you going to do to prevent it from happening again.”\n\nRecently, Rho Markets announced on Twitter that the incident has been resolved and funds will be reallocated back to borrow pools soon. \n\n\nDear Rho Fam,We are pleased to inform you that the incident has been successfully resolved.🔸We are currently in the process of reallocating funds back to the borrow pools. Rest assured, a comprehensive postmortem report will be shared with the community in due course.🔸In…— Rho Markets📜 | Rho.scroll (@RhoMarketsHQ) July 19, 2024\n\n\nRho Markets holds approximately $22.17 million worth of assets, according to DeFiLlama.","kind":null,"is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.26.3","shortVersion":"4.26.3","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2454328101"}