Blockchain security platform Quantstamp is hoping to quell the increasing threats of flash loan attacks with a new service that claims to catch exploits before they go off, the company told CoinDesk.
The Economic Exploit Analysis service detects common attack pathways used by exploiters through automated tooling before protocols get hacked. The service has been released in collaboration with researchers from the University of Toronto.
In the first half of 2023 alone, an estimated $207 million worth of tokens were stolen through flash loan attacks.
A flash loan is an uncollateralized loan provided by a smart contract that can be taken out for as short as a single transaction. In these attacks, hackers leverage flash loans to borrow substantial funds and manipulate DeFi protocols into unexpected states that developers may not have anticipated.
Flash loan attacks can drain the entire total value locked (TVL) of a DeFi protocol, and their complicated nature combined with DeFi’s composability means these attacks often evade conventional audits.
“DeFi has the potential to change the global financial infrastructure for the better, but its success requires preempting threats like flash loan attacks. We developed this tool to provide DeFi protocols an extra layer of security on top of audits,” said Martin Derka, head of new initiatives at Quantstamp, in a note to CoinDesk. “As DeFi evolves, security measures need to evolve with it. Services like Economic Exploit Analysis give us an edge against hackers.”
The Quantstamp service is available for both deployed and undeployed protocols. However, while the search process of the tool is automated, some manual guidance and protocol-specific adaptations are required.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is an award-winning media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. In November 2023, CoinDesk was acquired by Bullish group, owner of Bullish, a regulated, institutional digital assets exchange. Bullish group is majority owned by Block.one; both groups have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary, and an editorial committee, chaired by a former editor-in-chief of The Wall Street Journal, is being formed to support journalistic integrity.