Ankr successfully patches hack, will reimburse victims and take actions to prevent further attacks

abdelaziz Fathi

DeFi protocol Ankr plans to reimburse its affected users after a hacker managed to exploit a bug in its code that allowed for unlimited minting of its liquid staking token.

The team behind the BNB Chain-based protocol wrote a blog post that described in detail exactly what happened and the primary steps they are taking to proactively prevent attacks from happening in the future. 

Ankr identified the exploit on December 1, which came from vulnerabilities in the smart contract code. Specifically, the malicious actors gained access to the team’s developer private key and altered the smart contract for its BNB liquid staking token (aBNBc). 

The team further explains that the hack allowed the exploiters to deploy a new version of aBNBc smart contract, which gave them the ability to mint about 60 trillion coins while bypassing verification. Then, the attacker swapped the minted aBNBc tokens, which represents a staked version of BNB token, for USDC stablecoin and moved them off Binance chain onto Ethereum and funneled through crypto mixer Tornado Cash. 

According to the post, Ankr estimates the damage to be $5 million worth of BNB across liquidity pools in various DEXes. At this stage, they are identifying liquidity providers that have been affected by the exploit due to the drainage of liquidity pools. Next, Ankr will purchase $5 million worth of BNB and use this to compensate the victims.

“Thanks to the fast actions from the Ankr team and various protocols, we were able to minimize any damage done extremely quickly. Hacks and exploits from bad actors like this are an unfortunate possibility in Web3, even with every attention to detail in security processes – but we were well prepared. Unlike previous events in the space this year, we are doing the right thing by our community and ensuring that this is taken care of immediately with lost funds restored,” said Chandler Song, Co-Founder & CEO at Ankr.

What are the next steps for Ankr?

In an announcement to its community, Ankr emphasized that they will discontinue aBNBc and aBNBb tokens with immediate effect. Instead, new ankrBNB tokens will be minted and airdropped to affected users. This is by far the most important security measure, as the attack solely affected aBNBc, and other tokens were safe. 

To do that, Ankr is currently going through the process of taking a snapshot to airdrop the newly-released ankrBNB tokens to affected users based on the balances they had before the exploit. 

Meanwhile, Ankr alerted all users not to trade aBNBc or speculatively buy it at a discount. After proper identification, they just need to wait for the ankrBNB airdrop, which will be proportional to the amount of aBNBc and aBNBb that pre-hack users held. 

The attack on Ankr was relatively small in comparison with other recent attacks on DeFi projects, which have seen more than $3 billion stolen from various crypto protocols so far in 2022.

While the protocol has been through a few dark days, this is a learning experience. Additionally, this action plan is said to allow Ankr to more rapidly restore value to legitimate token holders while also accelerating the planned migration to an upgraded contract.

Read this next

Industry News

FINRA to publish transaction details in U.S. Treasury securities

“Consistent with our longstanding practice, FINRA is introducing greater transparency in a calibrated and careful manner, benefiting liquidity and resilience in this critical market while also mitigating potential information leakage concerns.”

Institutional FX

OpenYield launches “cheap and easy” fixed income trading for brokers

“We’re on a mission to make bonds cheap and easy to trade, and are excited about the opportunity to build generational capital markets infrastructure.”

Digital Assets

Sumsub and Mercuryo publish a guide for VASPs: “Mastering Travel Rule Compliance”

“At Sumsub, we’ve concentrated our efforts on filling the gap in understanding the complexity of Travel Rule regulation and helping organizations find the best solution to stay safe and compliant while minimizing costs and avoiding potential risks of non-compliance. This guide we created with Mercuryo, our trusted partner, is the ultimate navigation tool all VASPs can consult.”

Digital Assets

Bitget Wallet Leads with Record Swap Volume & New Crypto Innovations

This week, Bitget Wallet achieved a milestone by surpassing Metamask with a record 388,757 Swap order transactions, securing the global lead. The significant 7-day trading volume, almost 68,000 more than its rival, underscores its liquidity and user trust. This robust activity signals Bitget Wallet’s prominent role and reliability in the dynamic crypto market.

Digital Assets

Embarking on a Digital Currency Journey

Imagine you’ve stumbled upon a treasure map, leading you to untold riches hidden in the vastness of the internet. Instead of gold coins and jewel-encrusted goblets, this treasure comes in the form of digital currencies, the modern-day loot coveted by many.

Reviews

Traders Union Experts Share The Trading Analyst Review For 2024

Navigating options trading in rapidly shifting markets poses a considerable challenge. This is where options trading alert services become invaluable. They aid traders in keeping abreast of evolving opportunities and market trends. In this assessment, Traders Union experts scrutinize The Trading Analyst alert service to ascertain its efficacy. 

Digital Assets

BlockDAG’s Presale Achieves $9.9M: Aiming For A 5000-Fold ROI As Cardano’s Price Rises And Fantom Launches Sonic

Explore Cardano’s surge, Sonic’s efficiency, and why BlockDAG’s growth makes it the top crypto choice. A deep dive into the future of blockchain investments.

Digital Assets

US, UK probe $20 billion Tether transfers tied to Russian exchange.

U.S. and UK authorities are investigating the movement of $20 billion in the USD-pegged stablecoin tether (USDT) through Moscow-based exchange Garantex.

Digital Assets

BlockDAG Presale Raises $9.9M as Batch 5 Nears Sell-Out Amid Bonk’s Fluctuating Trading Volume & Spell’s Bullish Price

Explore BONK’s trading volume, SPELL’s market shifts, and why BlockDAG’s 10,000 ROI makes it an ideal crypto for savvy investors in 2024.

<