Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Loans using different assets to know how to equate apples and oranges. This is done by using a Pricing Oracle, such as ChainLink, that provides the market cost of each token.

Terraform Labs’ UST and LUNA tokens feel dramatically in May of 2022. So, what happens when the token is drastically fluctuates? A freeze can be put onto it by the Pricing Oracle.

Is there a problem with this? Once the freeze occurred, the PriceOrcale price of the LUNA token was much higher than the market value. As a result, an attacker could perform flash loan attacks with this HIGHER value of the tokens to steal money from other locations.

This attack was not a single location, since it was Chainlink that made the mistake. Hence, both Venus Protocol and Blizz Finance lost 20 million in total.

Both of these companies did exactly what they were supposed to do with the Price Oracle as a service. However, they still got pwned. Maybe using TWO PriceOracles would have prevented this from occurring?