zerokn0wledge

LI.FI exploit alert: which approvals to revoke

Quote143 words
OtherToolingOtherLI.FIRevoke.cashJumper$USDC$USDT

Alert on the roughly $8M LI.FI exploit listing four contracts whose approvals to revoke via Revoke.cash. Affected USDC and USDT approvals on Ethereum and Arbitrum, mainly hitting users with unlimited approvals.

Key claims
About $8M drained
Affects USDC and USDT approvals on Ethereum mainnet and Arbitrum
馃毃 Exploit Alert - Revoke Approvals 馃毃 Today, @lifiprotocol suffered an exploit and lost roughly $8M in funds so far. Investigation is ongoing but to ensure your funds are safu, use @RevokeCash and revoke ALL approvals you might have on: 0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae 0x341e94069f53234fE6DabeF707aD424830525715 0xDE1E598b81620773454588B85D6b5D4eEC32573e 0x24ca98fB6972F5eE05f0dB00595c7f68D9FaFd68 If you are a daily user of protocols like @jumperapp and don't see any approvals to revoke, don't get confused. Normally, approvals are only temporary and are revoked automatically after a few minutes. Unless you set it to unlimited manually. MOST USERS SHOULD BE FINE! However, if you have set unlimited approvals on the above LiFi contracts YOUR FUNDS ARE AT RISK! Go to revoke(.)cash and revoke these approvals immediately! The exploit seems to affect approvals for $USDC & $USDT on ETH mainnet and Arbitrum in case you're lost where to start revoking. Share and keep your frens safu.
QUOTING @peckshield
.@lifiprotocol has been drained of ~$8M. Do NOT interact with any LI[.]FI powered applications. t.co/0Vm8vqKKMF t.co/rlHu3lUpPq
Open on X

What came next 路 since 16 Jul 2024

Since then

Zero has written 1 more piece on LI.FI since this one.

zerokn0wledge avatar
Working together

Research, advisory and builds for deep-tech teams.