Nexo

Start Earning Up to 16% Interest Automatically

Learn More
Home » Analysis » Fantom DeFi Project Grim Finance Suffers $30M Hack

Fantom DeFi Project Grim Finance Suffers $30M Hack

by

The hacker leveraged a reentrancy bug to steal the funds.

Fantom DeFi Project Grim Finance Suffers $30M Hack
Shutterstock cover by pixelparticle

Key Takeaways

  • An unknown hacker has stolen $30 million from the Fantom-based DeFi project Grim Finance.
  • The hacker exploited a reentrancy bug in the project's smart contracts.
  • Following the attack, Grim Finance's total value locked has tumbled from $98.9 million to $4.2 million, while its native token GRIM is down 70%.

Share this article

Grim Finance, a DeFi protocol built on Fantom, has become the target of a $30 million hack.

Fantom Project Hit By $30 Million Hack 

Grim Finance has been hacked.

This weekend, an unknown attacker stole $30 million from the project’s yield vaults.

The Grim Finance team announced the attack in a Sunday tweet, revealing the total losses and that it had identified the hacker’s address.

Grim Finance is a DeFi project built on Fantom. It functions similarly to the popular Ethereum protocol Yearn.Finance, letting users deposit crypto assets like FTM to “vaults.” The project’s vaults use complex multi-step strategies across DeFi to generate lucrative yields for users.

The team described the incident as an “advanced attack” in which a hacker exploited a reentrancy bug to steal funds deposited in its vaults. The hacker used the bug to drain over $30 million worth of FTM. Their transaction history shows a paper trail of interactions with Fantom-based decentralized exchanges like SpookySwap, where they exchanged their stolen tokens for stablecoins.

The DeFi space has seen millions of dollars worth of losses due to other similar reentrancy bugs over the last year. In August, an attacker exploited a reentrancy bug in Cream Finance’s smart contracts to steal $17.6 million. They later returned the majority of the funds.

Following the hack, the Grim Finance team announced that it had paused its vaults and notified Circle, Maker, and AnySwap to “potentially freeze” further transfers. The total value locked in the protocol, meanwhile, has tumbled from $98.9 million to $4.2 million following the incident, per data provided by DeFiLlama. The GRIM token is also down about 70% following the attack, trading at $0.23 at press time.

Disclosure: At the time of writing, the author of this piece owned ETH and other cryptocurrencies.

Share this article

The information on or accessed through this website is obtained from independent sources we believe to be accurate and reliable, but Decentral Media, Inc. makes no representation or warranty as to the timeliness, completeness, or accuracy of any information on or accessed through this website. Decentral Media, Inc. is not an investment advisor. We do not give personalized investment advice or other financial advice. The information on this website is subject to change without notice. Some or all of the information on this website may become outdated, or it may be or become incomplete or inaccurate. We may, but are not obligated to, update any outdated, incomplete, or inaccurate information.

Crypto Briefing may augment articles with AI-generated content created by Crypto Briefing’s own proprietary AI platform. We use AI as a tool to deliver fast, valuable and actionable information without losing the insight - and oversight - of experienced crypto natives. All AI augmented content is carefully reviewed, including for factural accuracy, by our editors and writers, and always draws from multiple primary and secondary sources when available to create our stories and articles.

You should never make an investment decision on an ICO, IEO, or other investment based on the information on this website, and you should never interpret or otherwise rely on any of the information on this website as investment advice. We strongly recommend that you consult a licensed investment advisor or other qualified financial professional if you are seeking investment advice on an ICO, IEO, or other investment. We do not accept compensation in any form for analyzing or reporting on any ICO, IEO, cryptocurrency, currency, tokenized sales, securities, or commodities.

See full terms and conditions.