Another One Bites The Dust: KyberSwap DEX Suffers $46 Million Exploit

Jim Haastrup
4 Min Read

Key Insights

  • KyberSwap, a decentralized exchange aggregator, has been exploited for $46 million.
  • The attacker stole various crypto assets, including Wrapped Ether, Lido-staked Ether, and Arbitrum.
  • The attacker also left a taunting message on the Ethereum network, saying that negotiations would start in a few hours.
  • The TVL on KyberSwap has dropped from $105 million to $8.2 million as a result of the attack.
  • The KyberSwap hack is the latest in a series of DeFi exploits that have plagued the industry in 2023.

According to recent reports, a new decentralized exchange has just been hit with a massive hack.

The liquidity pools of KyberSwap, a decentralized exchange aggregator have now been drained of $46 million worth of crypto assets like Wrapped Ether, Lido-staked Ether and Arbitrum from several chains.

How The Attack Happened

According to an announcement tweet on Thursday this week, the Kyber Network team urged users to withdraw their funds from KyberSwap Elastic, as the protocol was under attack.

The Kyber Network is under attack
The Kyber Network is under attack

Blockchain analysts weighing in on the conversation confirmed that the attacker exploited the Kyber Network using a distributed attack across several chains and protocols.

The exploiter wallet address (0xC9B8…50c6) was also identified and tracked by the community and was discovered to still be active.

The KyberSwap attacker address
The KyberSwap attacker address

How Much Was Actually Stolen?

According to data from Arkham Intelligence, the attacker managed to steal more than $40 million in various crypto assets from KyberSwap, including $20 million in Wrapped Ether (wETH), $7 million in wrapped Lido-staked Ether (wstETH), and $4 million in Arbitrum (ARB).

The exploiter’s address
The exploiter’s address

Upon stealing these funds, the cryptocurrencies were also swapped for other tokens, like USDC, DAI and WBTC, using other DeFi platforms like Uniswap and SushiSwap.

Not only that, the attacker also left a taunting message on the Ethereum network, saying:

“negotiations will start In a few hours when I am fully rested. Thank you”

KyberSwap TVL Tanks

As a result of this attack, DefiLlama shows that the TVL (or total value locked) on KyberSwap has plummeted by 80% in a matter of hours, as users withdrew their funds or lost them to the hack.

Defi TVL drops on KyberSwap
Defi TVL drops on KyberSwap

The TVL on KyberSwap has dropped from $105 million to $8.2 million since the hack.

The hack also affected the price of Kyber Network Crystal (KNC), the native token of the Kyber Network which had already been in a price rejection from $0.9.

KNC’s decline over the last day
KNC’s decline over the last day

KNC has declined by more than 4% according to CoinMarketCap as the news of the exploit spread, to $0.7138.

Furthermore, this is not the first security incident that KyberSwap has encountered. A weakness in the protocol’s smart contracts was discovered by the developers sometime in April, even though that incident was less serious, and no funds were lost.

The state of DeFi security

The KyberSwap hack is the latest in a series of DeFi exploits that have plagued the industry in 2023.

According to data from CertiK, as of mid-November, losses in November sat at $173 million as of the 17th day of the month.

CertiK also noted that even then, November already had the 4th highest crypto loss of the year.

$7.5 billion stolen so far
$7.5 billion stolen so far

DefiLlama also shows that so far, about $7.5 billion has been lost to hacks and exploits.

Disclaimer: Voice of Crypto aims to deliver accurate and up-to-date information, but it will not be responsible for any missing facts or inaccurate information. Cryptocurrencies are highly volatile financial assets, so research and make your own financial decisions.

Follow:
Jim Haastrup is a blockchain and technical writer at Voice of Crypto, where he covers cryptocurrency, NFTs, DeFi, GameFi, and the Metaverse. Before joining Voice of Crypto in 2022, he spent over three years as a senior technical writer across multiple blockchain projects, including Hashtoken, Naxar, and Bino, where he specialized in whitepapers, technical documentation, and content strategy for decentralized finance applications. Jim began his career as a junior technical writer at RM in Canada before advancing to lead technical writing roles at Bulltoken, a cryptocurrency crowdfunding platform in Norway. Throughout his career, he has authored more than 800 articles and collaborated with development teams to translate complex blockchain protocols into accessible content for diverse audiences including developers, investors, and crypto enthusiasts. His work spans ICO/STO/IDO research and analysis, cryptocurrency market trend forecasting, and social media management for crypto brands. Jim has helped numerous startups build their online presence through strategic content marketing, technical whitepapers, and pitch deck development. Jim graduated from the Federal University of Agriculture, Abeokuta (FUNAAB), Nigeria with a Bachelor of Engineering in Electrical Engineering in 2021. Disclosure: No significant crypto holdings.