Tender. fi Attack Walk-Through

The recent whitehat attack on Tender. fi’s lending protocol stole $1.59 million funds from the liquidity pools. Let’s trace back the attack step by step on Arbiscan to see how the exploit took place and discover key vulnerabilities.

Context

Tender. fi is a crypto borrowing and lending platform. Tender protocol is designed on top of Compound’s V2 protocols, which allow users to borrow any supported crypto assets given proportional deposits as collaterals. Unlike compounds, …

assets attack back compound crypto cryptocurrency discover exploit funds hacking key lending liquidity photo platform protocol protocols security solidity trace vulnerabilities web3 whitehat