{"id":831,"date":"2022-05-13T13:00:00","date_gmt":"2022-05-13T13:00:00","guid":{"rendered":"https:\/\/grandpascrypto.com\/?p=831"},"modified":"2022-05-12T17:49:22","modified_gmt":"2022-05-12T17:49:22","slug":"failed-rainbow-bridge-hack-attacker-loses-2-5-eth","status":"publish","type":"post","link":"https:\/\/grandpascrypto.com\/failed-rainbow-bridge-hack-attacker-loses-2-5-eth\/","title":{"rendered":"Failed Rainbow Bridge Hack. Attacker Loses 2.5 ETH"},"content":{"rendered":"\n

tl;dr Summary:<\/em><\/strong> The NEAR Protocol successfully blocked an attempt to exploit its Rainbow Bridge, a platform used to move tokens between NEAR, Aurora, and Ethereum. No funds were lost, but the failed attempt cost the attacker 2.5 ETH. <\/em><\/p>\n\n\n\n

With over 100 blockchains, each with its own ecosystem of dApps, there is a need for interoperability between them. Think of this as different states or countries, and just like countries, these ecosystems cannot be sustained in isolation.<\/p>\n\n\n\n

The last two years saw a massive growth in blockchain bridges that enabled communication and interoperability between these siloed systems.  <\/p>\n\n\n\n

\"\"
Source: https:\/\/medium.com\/1kxnetwork\/blockchain-bridges-5db6afac44f8<\/figcaption><\/figure>\n\n\n\n

Bridges<\/a> are pieces of code that allow users of different blockchains to move their assets (coin, tokens, or NFT) from one chain to another. <\/p>\n\n\n\n

Bridges have made it easy for users to move assets across chains. These bridges also revolutionalised DeFi as users can now take advantage of opportunities (arbitrage or yield farming) in other ecosystems.<\/p>\n\n\n\n

But all this advancement came with a price. Blockchain bridges have been a top target for attackers, with over $1 billion lost in over a year<\/a>. Notable hacks include the Ronin hack<\/a> where attackers successfully stole $625 million in cryptocurrency and the Wormhole attack<\/a> that resulted in a loss of $325 million.\u00a0\u00a0\u00a0<\/p>\n\n\n\n

Rainbow Bridge Hack<\/strong><\/h2>\n\n\n\n

On May 1, the Rainbow Bridge was attacked. However, in this case, a crisis was averted before the attacker could do any damage as the protocol managed to stop the attack automatically. <\/p>\n\n\n\n

Rainbow Bridge is a cross-chain bridge that allows users to transfer assets between Ethereum, NEAR, and Aurora networks. According to Aurora Labs\u2019 Alex Shevchenko, the attempt started on May 1 when the attacker deployed a smart contract (code that runs on a blockchain) to deposit funds to become a relayer. <\/p>\n\n\n\n

Let us understand what this means by looking at a simple example of how the Rainbow Bridge works.<\/p>\n\n\n\n

Assume that you want to move five LINK tokens from Ethereum to the NEAR bridge. To do this in a trustless fashion would require several steps:<\/p>\n\n\n\n

  1. You start by telling Ethereum to move 5 LINK tokens to NEAR.<\/li>
  2. Ethereum then checks if you have these tokens and then takes them out of circulation and locks them in a vault (code).<\/li>
  3. You then tell NEAR to create 5 LINK tokens on its chain.<\/li>
  4. NEAR does not trust you, and so it will first ask you to prove that you have 5 LINK tokens available on Ethereum.<\/li>
  5. Once you provide the proof, NEAR will independently verify it and create the 5 LINK tokens.<\/li><\/ol>\n\n\n\n

    The job of a relayer on the Rainbow Bridge is to ensure that the proof that the NEAR protocol needs is available. By trying to become a relayer, the attacker hoped to forge or submit fabricated proofs to the nodes in the protocol with the intention of pushing false transactions.<\/p>\n\n\n\n

    When one of the bridge\u2019s watchdogs saw this, it created a challenge and sent it to Ethereum. At the same time an MEV bot (read more about MEV bots a.k.a searchers here<\/a>) detected this transaction and calculated that front-running it would result in a 2.5 ETH gain. <\/p>\n\n\n\n

    The watchdog transaction failed, but the MEV bot succeeded resulting in the roll back of the fabricated block created by the attacker. By this time, the team jumped in and paused the bridge in order to study what had happened.\u00a0<\/p>\n\n\n\n

    \n

    6 \/ 18
    Immediately, MEV bots detected this transaction and figured out that front-running it would result in 2.5 ETH gain, so they did exactly this:    https:\/\/t.co\/wtIA8IMvMf<\/a><\/p>— Alex Shevchenko \ud83c\uddfa\ud83c\udde6 (@AlexAuroraDev) May 1, 2022<\/a><\/blockquote>