Bitcoin
$63,580.88-1.00%
Ethereum
$3,074.96-2.36%
Binance Coin
$590.82-0.43%
Solana
$154.05+4.66%
XRP
$0.54095303+1.88%
Dogecoin
$0.15738279-3.23%
Toncoin
$5.83-2.08%
Cardano
$0.45417752-1.47%
Shiba Inu
$0.00002402-3.48%
Avalanche
$37.19-0.67%
Tron
$0.11877643-1.99%
Wrapped Bitcoin
$63,585.84-0.87%
PlayIconNav
Crypto Prices CoinDesk 20 Index CoinDesk 20 Index
Countdown to ConsensusThe largest and longest running event that covers all sides of crypto and Web3
22
DAYS
11
HR
03
MIN
09
SEC
Technology

Stablecoin Cashio Suffers 'Infinite Glitch' Exploit, TVL Drops by $28M

Cashio's CASH token has lost almost all its value, as of the time of writing.

By Shaurya Malwa
AccessTimeIconMar 23, 2022 at 11:56 a.m. UTC
Updated May 11, 2023 at 5:29 p.m. UTC
(Getty/Seksan Mongkhonkhamsao)
(Getty/Seksan Mongkhonkhamsao)
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

Solana-based stablecoin protocol Cashio was exploited in an “infinite glitch” attack, developers said on Wednesday.

  • Following the exploit, the value of Cashio's CASH token dropped to nearly zero.
  • “Please do not mint any CASH. There is an infinite mint glitch. We are investigating the issue and we believe we have found the root cause. Please withdraw your funds from pools,” the team wrote in a tweet.
  • CASH is a stablecoin pegged to the U.S .dollar and is backed by USDC and USDT via a liquidity pool on Saber, a Solana-based market maker. Users can mint their CASH by providing liquidity with USDT and USDC.
  • The incident on Wednesday allowed the hacker to manipulate Cashio’s smart contracts to mint an infinite supply of CASH without providing any liquidity in return. Blockchain data shows over 2 billion CASH were minted, without any USDC or USDT backing.
  • The hacker used the newly minted tokens to exchange them for stablecoins on Cashio’s liquidity pools. Data from tracking tool DeFiLlama shows the total value locked on Cashio dropped by $28 million after the attack.
  • Stablecoins based on other protocols has suffered similar attacks in the past. Polygon-based Safedollar dropped to $0 after an exploit in June 2021, with both USDC and USDT siphoned off by the hacker at the time.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Shaurya Malwa
Shaurya Malwa

Shaurya is the Deputy Managing Editor for the Data & Tokens team, focusing on decentralized finance, markets, on-chain data, and governance across all major and minor blockchains.

Follow @shauryamalwa on Twitter

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.