Defi Protocol LI.FI Struck by $8M Exploit
Summary
Decentralized finance platform LI.FI protocol has suffered an exploit resulting in a loss of approximately $8 million. The exploit followed a series of suspicious withdrawals. LI.FI, which allows users to trade across various blockchains, venues and bridges, advised users not to interact with any LI.FI powered applications while the potential exploit was being investigated. The stolen funds, which are held in a wallet, consist of 1,715 ether (ETH) worth $5.8 million and USDC, USDT and DAI stablecoins. Crypto security firm Decurity identified the exploit as involving the LI.FI bridge and potentially linked to an arbitrary call with user controlled data via `depositToGasZipERC20()` in GasZipFacet.
