Avalanche

Avalanche operates as a blockchain platform, providing the underlying infrastructure for decentralized applications and financial services. The platform facilitates activities such as decentralized lending protocols and automated market maker exchanges, evidenced by its hosting of protocols like Nereus Finance, Trader Joe, and Curve Finance. Its core function involves enabling smart contract execution and transaction settlement within its ecosystem. The organization maintains its headquarters in Switzerland.

A notable incident impacting the Avalanche ecosystem occurred on September 7, 2022. An attacker exploited a vulnerability specifically within the CauldronV2 smart contract, deployed on the Avalanche blockchain. This exploit utilized a flash loan attack mechanism, borrowing a substantial sum of $51 million in cryptocurrency. The attacker manipulated the AVAX/USDC exchange rate, enabling the theft of $370,000 worth of USDC stablecoins. Furthermore, the attack generated $500,000 in bad debt denominated in the NXUSD stablecoin for the Nereus Finance lending protocol built atop Avalanche. Liquidity providers across Nereus Finance, Trader Joe, and Curve Finance were adversely affected by this manipulation.

The incident was attributed solely to a flaw in the CauldronV2 smart contract code itself, not to any inherent vulnerability within the Avalanche blockchain network. Following the attack, the victim entity responsible for the exploited market paused its operations to mitigate further damage. They subsequently fixed the identified vulnerability in the smart contract. To address the consequences, the victim covered the incurred bad debt using internal funds and offered a 20% reward for the return of the stolen assets. The attacker transferred the stolen funds from the Avalanche blockchain to the Ethereum network.