Maze-Protocol.md

Maze Protocol

• Amount Lost: $4,000,000.00
• Funds Returned: $3,800,000.00
• Category: Borrowing and Lending
• Date: 2021-8-11

The attackers exploited a leak inside the lending protocol that allowed them to initiate loans under users’ collateral.

The examples of the attacker’s transaction:

https://www.bscscan.com/tx/0x2a389d058977f0327839ddf5fc3a56b025e937fed67137e0259dce1eb02f1355
https://www.bscscan.com/tx/0x636c682937831ce4585ab8bb547801508688393070bd03010485f8fc86935fc8

The project’s contract was attacked by the following addresses:

1. 0x330bF950Ab2Fb1f8Ed039a50b1a92478714a6c7c

2. 0x4f5BC3866858bF892118aC675e015286C37bBEfd

3. 0xdAF38D906A94a20B07Aef895A2cDE34877f9da7f

4. 0x3551fD337471a8C6374D2F9c97519cA94BA1D59a

5. 0x79391843A5EfF373A20e9F93096B41ff38f38013

6. 0x6666666C0765744193F48255717f05A0105D2401

Proof Links:

• https://blog.mazeprotocol.com/neko-hacking-incident-report-e46cdf179fd9