Digital Asset
Intelligence
Security Incident · Bridge

Terra Third-party Vulnerability: $5.28M Reported Loss

·Historical incident record

Incident Overview

Terra blockchain experienced a security breach that led to the theft of tokens. The attackers exploited a known vulnerability related to the third-party module IBC hooks, stealing the value of cross-chain assets, including USDC stablecoins and Astroport tokens. The Terra team has taken emergency measures to prevent further losses and coordinated with validators to apply a patch to fix the vulnerability. According to Zaki Manian, co-founder of Sommelier Finance, although the vulnerability was patched in the Cosmos ecosystem back in April, Terra did not include this patch in their June upgrade, resulting in the vulnerability being re-exposed and exploited.

Sources & References

Original incident referencehttps://www.theblock.co/post/308440/attacker-exploits-ibc-hooks-vulnerability-to-steal-tokens-on-terra-blockchain (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Terra

    Attack methodPhishing Attack
    Reported loss$ 4,310,000
  2. Incident date
    Target

    LI.FI

    Attack methodContract Vulnerability
    Reported loss$ 11,600,000
  3. Incident date
    Target

    Minterest

    Attack methodFlash Loan Attack
    Reported loss$ 1,400,000
  4. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 210,000
  5. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 500,000