The exploit occurred around 1 p.m. EST today. The hacker removed around 114 million walbt, AllianceBlock's wrapped native token, and 98 million beur tokens from one of BonqDAO's troves. The trove is controlled by users and used to mint its payment token beur, which is pegged to the euro. The technical cause of the exploit is still unknown.
The hacker has sold roughly $1.2 million in tokens so far but is having trouble converting the entire amount into stablecoins or ETH due to illiquidity.
AllianceBlock said on Twitter the incident is isolated to the BonqDAO troves and no smart contracts were breached. Both teams worked on removing liquidity to mitigate the hacker converting the stolen tokens into other assets, and have stopped all exchange trading. AllianceBlock also paused bridging on the AllianceBlock Bridge until the situation is resolved.
AllianceBlock is working on a resolution to compensate affected albt holders. It has taken a snapshot of holders before the attack and will mint and airdrop new albt tokens to affected users.
BonqDAO is a non-custodial borrowing and lending platform. AllianceBlock is a decentralized crypto infrastructure platform that connects fintech providers and traditional finance institutions to decentralized finance applications.
