2023.08.13 - Zunami Protocol

Our platform detected a price manipulation hack on Zunami Protocol on August 13, 2023, during which the protocol suffered exploitation resulting in a loss exceeding $2 million. The attacker's wallet received funding through Tornado Cash, and the breach was executed through a series of two transactions spaced 8 minutes apart. The attacker depleted the liquidity pools for zETH and UZD on the Curve platform. The majority of the incurred losses were concentrated in the second transaction. Our real-time monitoring flagged both the malicious smart contract responsible for the breach and the two transaction activities. In the aftermath of the attack, our platform further detected the exploiter's actions of cashing out using Tornado Cash.