Uruguay
URY
Exactly Protocol smart-contract exploit suspends decentralized lending services
On August 18, 2023 attackers exploited inadequate validation in Exactly Protocol's DebtManager smart contract and stole approximately $7.6 million in assets. The team halted all protocol operations except withdrawals while investigating and auditing, leaving normal lending and leveraged-position functions unavailable.
79
Estimated severity
79 / 100
90
Source reliability
90 / 100
Approximate Date
2023-08-18
Targeted Company
EXA LABS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Uruguay
Affected countries
Uruguay
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
$7.61M
Impact types
Service unavailability
Affected sectors
Finance & InsuranceTechnology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
Exploitation of vulnerability
Attributed threat actors
No information
Sources
Incident Sources
medium.comhttps://medium.com/@exactly_protocol/exactly-protocol-incident-post-mortem-b4293d97e3eduruguayxxi.gub.uyhttps://www.uruguayxxi.gub.uy/uploads/informacion/c2c56003d525633e6aeb2ca70aebcff87d643b31.pdfhelp.exactly.apphttps://help.exactly.app/en/articles/9942510-exa-app-terms-and-conditionscointelegraph.comhttps://cointelegraph.com/news/defi-protocols-exactly-harbor-hacked-separate-attacks