Decentralized Finance suffers another blow: lending protocol hacked, heavy losses incurred.

Decentralized Finance领域再遭打击，借贷protocol遭受攻击

On April 19th, the lending protocol lendf.me, part of the decentralized finance (DeFi) platform dForce, was attacked by hackers, forcing the platform to shut down. Security experts analyzed that the method of this attack is very similar to the attack on a certain DEX the day before, and it is likely to be the work of the same group. Currently, the dForce team is actively investigating the details of the incident.

Blockchain data shows that attackers have transferred the acquired assets to two major DeFi lending platforms. Data platform statistics indicate that the locked value on the dForce platform plummeted by 99.9% within 24 hours, nearly reaching zero.

The attack incident closely followed another DeFi attack case on April 18. In the previous day's event, hackers exploited a compatibility vulnerability between a certain DEX and the ERC777 token standard, implementing a reentrancy attack during the trading process between ETH and imBTC through the ERC777's tokensToSend function. According to security agency analysis, the DEX lost approximately 1,278 ETH in this attack, worth around $220,000. Additionally, about 18.37 imBTC were acquired at a low price by two arbitrage accounts.

The two consecutive attacks highlight the security challenges faced by the Decentralized Finance ecosystem and remind developers and users to be more vigilant about potential security vulnerabilities. As the DeFi sector rapidly evolves, finding a balance between innovation and security will become an important issue for the industry.