Raft Suffers $3.3M Exploit That Drove Down Stablecoin 50%, but Hacker Likely Lost Money on Attack

Raft's R stablecoin lost its dollar peg, dropping as much as 50% in the immediate aftermath of the exploit.

AccessTimeIconNov 10, 2023 at 9:27 p.m. UTC
Updated Nov 10, 2023 at 10:10 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

Decentralized finance (DeFi) platform Raft lost some $3.3 million in ether (ETH) after being hacked Friday afternoon – but the attacker may have suffered a loss on the heist.

On-chain data shows that the attacker drained 1,577 ETH from Raft, then sent 1,570 ETH to a burn address – destroying most of the stolen assets and leaving only 7 ETH for themselves. The hacker's address received 18 ETH via crypto mixer service Tornado Cash before the attack, blockchain data on Arkham shows, likely to fund transactions.

After executing the transfers and paying the blockchain fees, the exploiter's crypto wallet was left with only 14 ETH, fewer funds than the initial 18 ETH.

This means that they face a 4 ETH loss on the whole maneuver.

Raft's R dollar-pegged stablecoin dropped as much as 50% from its supposed $1 price in the immediate aftermath, but later rebounded to around 70 cents, Coinmarketcap data shows.

Raft co-funder David Garai confirmed in a post on X (formerly Twitter) that the platform was targeted by an attack. The exploiter minted R tokens, which then were sold to drain automated market maker liquidity, while simultaneously withdrew collateral from Raft, Garai explained.

"We are trying to make people whole using the protocol-owned sDAI in the Peg Stability Module," Garai told CoinDesk in a Telegram message.

Raft is a DeFi lending platform, which issues the R stablecoin collateralized by liquid staking ether (ETH) derivatives such as Lido's stETH. Users can mint R token if they lock up ETH derivatives.

This was the second major crypto exploit on Friday. Earlier during the day, an attacker drained about $114 million in digital assets from centralized exchange Poloniex.

UPDATE (Nov. 11, 22:10 UTC): Adds context, details about the exploit from Raft founder.

Edited by Nikhilesh De.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Krisztian  Sandor

Krisztian Sandor is a reporter on the U.S. markets team focusing on stablecoins and institutional investment. He holds BTC and ETH.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.