DeFi Exchange KyberSwap Faces $265,000 Frontend Exploit

Google Tag Manager (GTM) Script
KyberSwap Request Users to Confirm Approvals

The decentralized exchange (DEX) KyberSwap joins the list of DeFi projects to experience a frontend exploit following the Curve Finance exploits from last month. The liquidity protocol on which KyberSwap is based, the Kyber Network, confirmed reports on Friday. It said the attack on its website was immediately discovered and resolved within a few hours. As per the company's announcement, the hackers were able to compromise the app's front end through the Google Tag Manager (GTM) script.

Google Tag Manager (GTM) Script

GTM scripts are frequently used by websites to track user activity and collect data for analytical purposes. The hackers forced users to approve their cash and transmitted them to the hacker's address by injecting a malicious script through GTM. However, before the update, the hacker shifted four transactions totaling $265,000 worth of Matic Aave interest-bearing USDC (MAUSDC) tokens.

Aave is on the Polygon blockchain in addition to Ethereum and a few others. The above token is a USDC stablecoin deposited via Aave's Polygon integration. Users receive the interest-bearing version as a representation of their deposit each time a token similar to this is deposited on the lending platform.

KyberSwap Request Users to Confirm Approvals

The hackers took use of this interest-bearing version in their exploit on Friday. Kyber Network advised all users to confirm their approvals using the block explorer's approval tool. In exchange for returning the assets taken, Kyber Network is offering the hackers a 15% bounty worth $40,000. The company requests that the remaining cash be sent to a wallet address it has provided.

The cryptocurrency sector has experienced hacks before and will continue to do so. This year saw two of the biggest hacks in history, the first to an Ethereum-to-Solana bridge network in January and the second to Axie Infinity's Ronin crypto bridge in March.

Disclaimer: The views and opinions expressed in this article are for informational purposes only and do not constitute financial, investment, or other advice. Investing in or trading crypto assets comes with a risk of financial loss.

crypto cyberattack Kyber Network DeFi Exchange KyberSwap Google Tag Manager

DeFi Exchange KyberSwap Faces $265,000 Frontend Exploit

Usha Yadav

Usha is a diehard crypto enthusiast and has been actively writing on different facets of the blockchain and crypto world. She has authored many research articles on cryptocurrency and aims to provide informational and quality content to readers. She firmly believes that crypto has a great potential to redefine the world of finance and blockchain.