What the F**K Happened to bZx! Security Lessons to Learn From the Two Exploits 🔒
The 8th largest decentralised finance protocol has been attacked!
In this episode, we discuss:
- What bZx, Fulcrum, Margin Trading + Flash loans are
- Exploit 1 + 2 of the bZx protocol
- What product and protocol teams can learn from this exploit
Timestamp to skip if you're already familiar with bZx, Fulcrum, Margin Trading + Flash loans: 05:09
Relevant links discussed:
- https://ethtrust.org/
- https://mythx.io/
- https://samczsun.com/taking-undercollateralized-loans-for-fun-and-for-profit/
- Julien Bouteloup's Twitter thread with a breakdown of what happened (Exploit 1) - https://twitter.com/bneiluj/status/1228757175595438080?s=20
- https://medium.com/@1inch.exchange/yes-we-hacked-bzx-fulcrum-but-one-month-ago-3f7e5c437ee3
- https://medium.com/@peckshield/bzx-hack-analysis-exposes-challenging-defi-inherent-composable-liquidity-risks-e3e1c623b7bd
- https://etherscan.io/txs/label/bzx-exploit
- Larry Cermak's Twitter thread with a breakdown of what happened (Exploit 2) - https://twitter.com/lawmaster/status/1229671232456593408
- https://bzx.network/blog/postmortem-ethdenver