On Feb. 16, CertiK, a blockchain security firm, posted a series of tweets reporting that Platypus Finance, a DeFi application, had been hit with a $9 million attack.
The attacker used flash loans on the AVAXblockchain to exploit a function in one of Platypus’ smart contracts. By depositing $44 million in stablecoins into the application, the attacker was able to mint around 41.79 million USP, which is Platypus’ stablecoin.
Then, the attacker took advantage of an emergency withdrawal function to access the original deposit and the minted USP, eventually swapping the USP for other assets and repaying the loan. The attack left Platypus with a loss of $9 million.
While most of the stolen funds are still in the attacker’s contract address, some have been sent to certain pools, and some of that amount may be recoverable. This is not the first time that flash loans have been used to target DeFi platforms.
Other examples include attacks on Mango Markets, New Free DAO, Nirvana Finance, and Deus DAO. Platypus confirmed the attack in a message on Telegram and Discord, saying it would pause operations while it assesses the situation.
Author
Alexander Stefanov
Reporter at CoinsPress
Alex is Editor-in-Chief of Coinspress and co-founder of Millennial Media Group, with nearly a decade of experience covering financial markets - crypto first, then everything else.
It started in 2016 with Bitcoin. Like most people at the time, he didn't fully understand it - so he kept digging. Blockchain, tokenomics, the projects, the cycles. That curiosity never stopped, and eventually pulled him into traditional markets too: equities, commodities, macro. Not because he left crypto behind, but because you can't properly understand one without the other.
What drives him is straightforward: he wants to know why something is happening, not just that it's happening. Most market coverage stops at the headline - price up, price down, here's a chart. Alex finds that kind of reporting actively unhelpful. If you walk away from an article without understanding the mechanism behind the move, what did you actually learn?
He holds a degree in Tourism from New Bulgarian University - not the most obvious path into financial markets, but markets have a way of pulling in people who are simply too curious to stay out. He has authored over 200 in-depth analyses and more than 10,000 articles across crypto and traditional finance. He still thinks every day in markets teaches him something new. That's probably why he hasn't stopped.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.