Crypto staking platform Bedrock exploited via a bug, users can swap 1 ETH for 1 BTC

As a seasoned analyst with years of experience navigating the complex and dynamic landscape of the crypto market, I find it concerning yet intriguing to witness incidents like the recent security breach at Bedrock. The unforeseen vulnerability that allowed users to exchange uniBTC for ETH is a stark reminder of the challenges inherent in the rapidly evolving DeFi space.


The staking platform Bedrock has admitted that it encountered a software glitch relating to uniBTC, enabling users to swap uniBTC for an ETH token instead.

On September 27, Bedrock made a post on social media to inform everyone about a security incident they’re dealing with at the moment. Their team is actively addressing this situation.

As a researcher, I can confirm that we have taken steps to ensure the safety of the remaining funds, and we are actively working on a reimbursement plan for our users. Preliminary estimates suggest that the total loss could amount to around $2 million in digital assets.

In other words, someone using our system discovered they could swap their Bitcoin for Ethereum due to a flaw, as this bug specifically targeted our uniBTC – a digital representation of Bitcoin often used in decentralized finance (DeFi).

“This function was likely leftover from the uniETH implementation,” the user remarked.

Today, the uniBTC token developed by Bedrock_DeFi has been exploited. A loophole in the system permitted users to generate uniBTC using ETH instead! This feature might have originated from the early days of uniETH development. (Credit: @spreekaway)— TWAP Clapper (@TwapSlapper) September 26, 2024

As per information from crypto.news, the value of a single Bitcoin is currently being traded at approximately $65,449, whereas the price of an Ethereum token is reportedly at around $2,659 as of this moment.

Rockbottom asserted that a majority of the losses occurred within the liquidity pools of decentralized exchanges, while emphasizing that the stored Wrapped Bitcoins and regular Bitcoins kept in reserves remain safe.

Currently, there’s no need for additional steps from our community members. Be confident that your uniBTC remains secure. We at Bedrock plan to share a detailed analysis (post-mortem report) soon.

Currently, the team behind the protocol has pinpointed the underlying issue responsible for the security breach and is collaborating closely with their auditing departments to restore the misplaced funds.

As a member of the Bedrock Team, I’m reaching out to update you on an important matter. We’ve recently identified a security vulnerability connected to uniBTC. Rest assured, we’ve taken swift action to address this issue and your funds are securely stored, as we say in our community, SAFU (Safe And For Use).— Bedrock | Bitcoin Restaking LIVE (@Bedrock_DeFi) September 27, 2024

In a move spearheaded by their Singapore headquarters, blockchain company RockX unveiled Bedrock in February 2023. This innovative protocol aims to appeal to institutional investors by emphasizing adherence to customer identity verification (KYC) and anti-money laundering (AML) rules, thereby making liquid staking more appealing.

On DefiLlama’s ranking, bedrock stands as the 8th largest liquid staking platform with a total value of over $240 million locked within it.

Read More

Sorry. No data so far.

2024-09-27 11:16