A legacy MakerDAO auction-keeper contract has been exploited for more than $500,000, according to an analysis cited by Protos. CertiK said the attacker removed 200 ETH from the contract by taking advantage of four 50-ETH lots that dated back to MakerDAO’s March 2020 “Black Thursday” liquidation crisis. Those lots were reportedly won for zero bids during the turmoil and were never settled.
CertiK traced the issue to missing access control on function 0x8804d1de in keeper implementation 0x68399ed8aa33C5b43F863EE6782de492006A5546. Using that flaw, the attacker accessed the leftover lots and later moved the funds in 10-ETH chunks through Tornado Cash. Protos noted that the affected contract was not a core component of the current Sky ecosystem, but the incident shows how older crypto contracts can still carry meaningful risk if they continue to hold value years after they stop being central to an active system.
A legacy MakerDAO auction-keeper contract was exploited for more than $500,000, with the incident tracing back to the protocol’s March 2020 Black Thursday liquidation crisis, according to Protos, citing a CertiK analysis.
CertiK said an attacker removed 200 ETH from a contract described as a legacy auction keeper. The contract was one of the first on Black Thursday to win ETH from MakerDAO with zero bids during the liquidation turmoil. Four 50-ETH lots were never settled, and the attacker was able to take advantage of that leftover state.
Where the flaw was found
According to CertiK, the root cause was missing access control on function 0x8804d1de in keeper implementation 0x68399ed8aa33C5b43F863EE6782de492006A5546.
By exploiting that weakness, the attacker gained access to four lots of 50 ETH that remained from the original Black Thursday crisis, for a total of 200 ETH. The funds were then sent through Tornado Cash in 10-ETH lots.
Not part of the current core system
Protos said the contract was not a core part of the current Sky ecosystem. Even so, the case highlights the long tail of risk in crypto systems: contracts that have not been central for nearly half a decade can still become attractive targets if they continue to hold real value on-chain.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
