Another Major Crypto Hack in Less a Week, $100M Stolen

blockchain.news:

The crypto industry has witnessed another major hack in less than a week, where a hacker has stolen $100 million from Mango Markets.

The trading and lending platform hosted on the Solana blockchain was exploited after manipulation in the price of Mango Market's native MANGO token via an oracle price manipulation attack.

Mango Markets has confirmed via a tweet that the company is investigating the matter. «We are currently investigating an incident where a hacker was able to drain funds from Mango via an oracle price manipulation. We are taking steps to have third parties freeze funds in flight,» the tweet said.

The company also has disabled deposits as a security measure.

«We will be disabling deposits on the front end as a precaution and will keep you updated as the situation evolves,» Mango Markets tweeted.

The hacker's wallet was funded from an FTX exchange account.

According to blockchain security firm Hacken's tweets, the hacker first opened an enormous size futures position, which resulted in MANGO token price pump. That further spiked the hacker's account collateral value and gave access to borrowing a large debt position across multiple coins on Mango Market's borrowing and lending platform.

According to Hacken, the hacker was then able to borrow and steal roughly $114 million across various tokens since the price of tokens and their collateral was manipulated much higher.

It is yet to understand how, exactly, the hacker was able to inflate MNGO's value in the eyes of the Mango protocol, according to Robert Chen from blockchain auditors OtterSec.

The attack caused the price of MANGO tokens to drop around 50%, Mango Markets' price feed showed.

Mango Markets has contacted the hacker through a statement regarding a