{"id":1064,"date":"2022-06-07T13:23:59","date_gmt":"2022-06-07T13:23:59","guid":{"rendered":"https:\/\/digitalcoinprice.com\/blog\/?p=1064"},"modified":"2022-06-07T13:23:59","modified_gmt":"2022-06-07T13:23:59","slug":"luna-classics-lunc-pricing-exploited","status":"publish","type":"post","link":"https:\/\/digitalcoinprice.com\/blog\/luna-classics-lunc-pricing-exploited","title":{"rendered":"Due to an error in Luna Classic&#8217;s (LUNC) pricing, the Mirror Protocol can be exploited."},"content":{"rendered":"<p><span style=\"font-weight: 400;\">An exploiter was able to drain four synthetic asset pools from the Mirror Protocol due to an error in the <\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/terra-luna\"><span style=\"font-weight: 400;\">Terra Classic<\/span><\/a><span style=\"font-weight: 400;\"> pricing oracle software.\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">Also read: <\/span><a href=\"https:\/\/digitalcoinprice.com\/blog\/after-luna-crash-still-to-invest-cryptos\"><b>After the Luna crash, is it still ok to invest in cryptos?<\/b><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">An ongoing exploit on <\/span><a href=\"https:\/\/digitalcoinprice.com\/category\/defi\"><span style=\"font-weight: 400;\">DeFi&#8217;s<\/span><\/a><span style=\"font-weight: 400;\"> synthetic assets platform Mirror Protocol is being used to drain all the funds due to a mismatch in the reported price of underlying assets.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8216;Mirroruser&#8217;, a governance participant who participates in the protocol&#8217;s forum, observed the exploit on May 29. As of the time of writing, the synthetic asset pools for mBTC, mDOT, mETH, and mGLXY have lost their assets worth more than $2 million.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Mirror platform enables traders to trade synthetic assets, including stocks and cryptocurrencies, on the Terra and Terra Classic layer-1 blockchains and the <\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/bnb\"><span style=\"font-weight: 400;\">BNB Chain (BNB)<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/ethereum\"><span style=\"font-weight: 400;\">Ethereum (ETH)<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">Also read: <\/span><a href=\"https:\/\/digitalcoinprice.com\/blog\/terra-wasnt-easy-runner-poorly-designed\"><b>Terra wasn\u2019t an easy runner, and it was poorly designed.<\/b><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">The exploit was made possible by an error in<\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/terra-luna\"><span style=\"font-weight: 400;\"> Luna Classic&#8217;s<\/span><\/a><span style=\"font-weight: 400;\"> pricing. While the real market prices of the two tokens differ wildly, the remaining Terra Classic validators noted that the LUNC ($0.000122) price was the same as the LUNA ($9.32), despite their price differences according to CoinGecko.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8216;ChainLinkGod,&#8217; a <\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/chainlink\"><span style=\"font-weight: 400;\">Chainlink<\/span><\/a><span style=\"font-weight: 400;\"> community ambassador, explained on May 31 that the &#8220;Terra Classic validators were running an outdated version of Oracle.&#8221;\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">.<a href=\"https:\/\/twitter.com\/mirror_protocol?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@mirror_protocol<\/a> has just been exploited again due to Terra Classic validators reporting the price of the new Terra 2.0 <a href=\"https:\/\/twitter.com\/search?q=%24LUNA&amp;src=ctag&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$LUNA<\/a> coin (~$9.80) instead of the original Terra Classic <a href=\"https:\/\/twitter.com\/search?q=%24LUNC&amp;src=ctag&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$LUNC<\/a> coin (~$0.0001)<\/p>\n<p>This is a massive operations failure<a href=\"https:\/\/t.co\/hO0M0UFBYq\" target=\"_blank\">https:\/\/t.co\/hO0M0UFBYq<\/a> <a href=\"https:\/\/t.co\/ygbr3ij4iS\" target=\"_blank\">https:\/\/t.co\/ygbr3ij4iS<\/a> <a href=\"https:\/\/t.co\/PO0huxX8oQ\" target=\"_blank\">pic.twitter.com\/PO0huxX8oQ<\/a><\/p>\n<p>\u2014 ChainLinkGod.eth (@ChainLinkGod) <a href=\"https:\/\/twitter.com\/ChainLinkGod\/status\/1531384782046711808?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">May 30, 2022<\/a><\/p><\/blockquote>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">In May, Blizz Finance and <\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/venus\"><span style=\"font-weight: 400;\">Venus<\/span><\/a><span style=\"font-weight: 400;\"> Protocol both fell victim to the same exploit, with Price Oracle Chainlink&#8217;s reported price for the LUNA coin stayed at $0.10, while the market price dropped significantly. <\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/venus-usdc\"><span style=\"font-weight: 400;\">VENUS<\/span><\/a><span style=\"font-weight: 400;\"> incurred a $11.2 million loss after Blizz Finance was drained.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">&#8216;FatMan&#8217;, commonly known by the Twitter handle TerraCommunity, predicted the Mirror flaw would affect the other &#8216;m&#8217; asset pools around 8:00am UTC on May 31. In addition, if the developers intervene to fix the bug, most pools could be saved.\u00a0\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The LUNC pricing error appears to have been fixed by 12:55am UTC, as the oracle price indicating its market value has returned to the real value.\u00a0\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">Also read: <\/span><a href=\"https:\/\/digitalcoinprice.com\/blog\/terraform-labs-korea-was-dissolved\"><b>Terraform Labs Korea was dissolved by Do Kwon just days before the LUNA crash, according to court documents<\/b><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">Mirror has been vulnerable to a major vulnerability a second time. FatMan tweeted on May 27 that &#8220;hundreds&#8221; of uses had exploited a previous bug in Mirror&#8217;s code since 2021. A user who exploited the first security vulnerability on the protocol was able to pull out collateral belonging to other users. The first exploiter took a total of $30,000, who was not caught until May 2022.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Following the plans of founder Do Kwon, Terra 2.0 was launched on May 28. The Terra Classic blockchain has been forked into Terra 2.0. The <\/span><a href=\"https:\/\/digitalcoinprice.com\/coins\/terrausd\"><span style=\"font-weight: 400;\">TerraUSD (UST)<\/span><\/a><span style=\"font-weight: 400;\"> stablecoin has been replaced with LUNA tokens by LUNA airdrops to investors who held Terra Classic and the Terra Classic blockchain during the collapse of Terra yesterday.\u00a0\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/www.coingecko.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CoinGecko<\/span><\/a><span style=\"font-weight: 400;\"> reports that for the past 24 hours, Mirror Protocol (MIR) tokens have lost 2% and are currently trading at $0.31.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">Also read: <\/span><a href=\"https:\/\/digitalcoinprice.com\/blog\/elon-musk-spacex-start-accepting-doge\"><b>Elon Musk says SpaceX will start accepting DOGE payments for merch<\/b><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>An exploiter was able to drain four synthetic asset pools from the Mirror Protocol due to an error in the Terra Classic pricing oracle software.\u00a0 &nbsp; Also read: After the Luna crash, is it still ok to invest in cryptos? &nbsp; An ongoing exploit on DeFi&#8217;s synthetic assets platform Mirror Protocol is being used to [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-1064","post","type-post","status-publish","format-standard","hentry","category-latest-news-updates"],"_links":{"self":[{"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/posts\/1064","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/comments?post=1064"}],"version-history":[{"count":1,"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/posts\/1064\/revisions"}],"predecessor-version":[{"id":1065,"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/posts\/1064\/revisions\/1065"}],"wp:attachment":[{"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/media?parent=1064"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/categories?post=1064"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digitalcoinprice.com\/blog\/wp-json\/wp\/v2\/tags?post=1064"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}