Sonne Finance Hit by $20 Million Hack, SONNE Token Crashes

Sonne Finance's SONNE token plummeted 60% to $0.025 following a $20 million hack on the decentralized lending protocol, which saw exploiters manipulate markets using a "donation" attack. The breach, isolated to the platform's Optimism blockchain, allowed the attackers to steal various tokens before being disrupted. The developers claim to have recovered $6.5 million and are actively pursuing the hacker.

Sonne Finance Reels from $20 Million Hack, SONNE Token Plummets

Sonne Finance's SONNE token has taken a nosedive following a sophisticated hack that siphoned $20 million from the decentralized lending protocol in the early hours of Wednesday. Amidst the market turmoil, developers have revealed the extent of the breach and are actively pursuing avenues to recover the stolen funds.

The SONNE token has witnessed a sharp depreciation, shedding over 60% of its value to a mere 2.5 cents, marking its lowest point in more than a year. Despite developers' swift intervention to halt the outflow of $6.5 million, the hack has eroded the protocol's market capitalization to a mere $20 million.

The perpetrators employed a "donation" attack, exploiting vulnerabilities in specific markets offered by the platform, allowing them to pilfer various tokens before their illicit activities were detected. The incident transpired on Sonne's platform hosted on the Optimism blockchain, while the protocol's Base blockchain version remained unscathed.

Unraveling the Hack's Mechanics

The exploit unfolded following the protocol's introduction of token markets for Velodrome Finance's VELO, based on a recent community proposal. The attacker cunningly exploited a two-day timelock to execute a series of four transactions, which involved creating markets and modifying collateral factors.

A timelock contract functions as an automated mechanism that triggers a transaction's execution at a predetermined time, in this case, two days after its initiation. The attacker leveraged this feature to execute transactions involving substantial cryptocurrency donations, manipulating the exchange rates between two tokens.

By artfully orchestrating these transactions, the attacker duped the platform into perceiving it possessed more collateral than was genuinely available. Blockchain records indicate the attacker succeeded in transferring millions of VELO, ether, and USD Coin USDCUSD in the wake of the manipulation. Subsequently, they converted these assets into approximately $8 million worth of bitcoin and ether and rerouted the funds to a newly created wallet address in the early hours of the European trading day.

Sonne Finance had previously safeguarded itself against similar attacks by creating markets with zero collateral factors, manually adding and permanently removing collateral before malicious actors could exploit market fluctuations.

Recovery Efforts Underway

In an official statement regarding the exploit, Sonne Finance's developers have expressed their unwavering commitment to retrieving the stolen funds. They have also initiated a bounty program to incentivize the hacker's cooperation in returning the ill-gotten gains.

The incident has underscored the heightened security risks associated with decentralized finance (DeFi) protocols and the urgent need for robust safeguards to protect users' funds. As the DeFi ecosystem continues to evolve, it is paramount that developers prioritize security measures and implement stringent protocols to prevent future hacks.