Bitfinex thwarts $15 billion security breach attempt

Brother

Professional
Messages
2,565
Reputation
3
Reaction score
363
Points
83
An alleged XRP transaction worth nearly $15 billion from an unknown wallet on Bitfinex was part of a failed partial payment exploit. This was stated by CTO of the exchange Paolo Ardoino.

Someone attempted to attack @bitfinex via "Partial Payments Exploit".
Attack failed since Bitfinex properly handles 'delivered_amount' data field.https://t.co/EiGw9UQmmq

(updated with better gif) https://t.co/8I7vlO05ou pic.twitter.com/DxOnJLLkhU
— Paolo Ardoino (@paoloardoino) January 14, 2024

Initially, the Whale Alert service drew attention to the transfer of approximately half of the XRP market supply. However, the team later deleted the tweet and stated that there was an "issue with correctly reading the Ripple node response, resulting in several erroneous messages."

dfb372e99b.png


Ardoino explained that this was an attack on the partial payments function, and the attacker expected that the exchange’s software was not configured correctly to process such transactions.

The exploit assumes that in the case of a partial payment, the system calculates the amount from the Amount field, but should - from the delivered_amount, which indicates the actual amount of the transfer.

Ardoino noted that Bitfinex has its field processing configured correctly.

According to the blockchain explorer, an unknown person also tried to attack Binance with the transfer of 58.9 billion XRP. The actual transaction amount was 0.0017 XRP.

2188b46b7a.jpg
 
Top