Cross-chain execution protocol Relay said an earlier flaw in its API exposed pending order information before trades were executed, allowing MEV searchers to use routing state to carry out sandwich attacks. The incident affected about 5,600 users. Relay said the attackers made about $136,000, while the median user loss came to roughly $11.88. The team also said it paid a $50,000 bug bounty to Outputlayer, the security team that identified the issue. Relay plans to fully reimburse affected users for about $312,000 in total. According to the disclosure, users will not need to file claims or submit applications, as compensation will be sent automatically to the relevant wallet addresses. The details were reported by Odaily.
Cross-chain execution protocol Relay disclosed that a flaw previously existed in its API, exposing pending order information before trades were executed. That allowed MEV searchers to use related routing state to conduct sandwich attacks.
The incident affected about 5,600 users. Relay said the attackers made about $136,000, while the median loss per user was about $11.88.
Relay also said it paid a $50,000 bug bounty to Outputlayer, the security team that found the flaw, and plans to fully reimburse affected users for about $312,000 in total. Users do not need to submit claims, as the compensation will be sent automatically to the relevant wallet addresses.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
