Script3
492 posts

Tweet épinglé

@shihahmedov This account is NOT affiliated with Script3. They have been reported already, thank you.
English

For YieldBlox backstop depositors and those liquidated during the oracle manipulation on the community-managed YieldBlox DAO Pool:
For Backstoppers:
Script3 currently has 1.45M BLND-USDC LP tokens that will be distributed toward a backstop remediation effort.
For Those Liquidated:
Script3 did not fill any liquidation auctions at unfair prices. Script3 lost ~$10,000 filling liquidations. Therefore, there will be no remediation for those liquidated during the manipulation.
Users who were liquidated as a result of the bad debt writeoff decreasing collateral value already received remediation on February 27.
Stay tuned for further updates.
English

@script3official I can’t seem to be able to access blend fixed pool V2 vide both my Freighter wallet and the smoothie.capital website. Is there any major upgrade/update taking place?🤷♂️
English

For users impacted by the oracle manipulation on the community-managed YieldBlox DAO Pool:
Remediation for depositors in the pool has been fully distributed directly into affected accounts (wallets) via payment as of 19:12 UTC with the memo “YieldBlox Pool Remediation.” Users should see their balance increase.
If an account interacts with the YieldBlox Pool through a wallet’s DeFindex integration, their remediation will be distributed by @PaltaLabs. Your ‘earn’ balance will automatically be updated to reflect the remediation.
If an account is affected but does not have the correct trustline(s), the remediation will appear as a claimable balance. After the correct trustlines are added, the remediation can be claimed.
If a remediation payment amount was under 0.01 XLM, 0.01 EURC, or 0.01 USDC, it was skipped.
Please check with your specific wallet provider if you have any questions.
This announcement does not apply to users affected by liquidations or backstop depositors - more information pertaining to those users will be shared at a later point.
Stay tuned for further updates.
English

A public repository of affected accounts is below.
github.com/script3/yieldb…
English

The YieldBlox DAO Pool is community-managed and was community-created. Script3 does not own, manage, or contribute to YieldBlox DAO.
We contributed to Blend and are helping coordinate remediation efforts.
Rekt News@RektHQ
Oracle manipulation drained $10.97M from the @script3official - @YieldBloxDAO pool on @blend_capital V2. Attacker pumped illiquid collateral USTRY 100x on the Stellar DEX. The oracle reported the fake price as real. rekt.news/yieldblox-rekt
English

@script3official I would like to know if the refund will be made automatically, or do I need to submit a request?
English

Script3 is coordinating the remediation effort for users affected by the oracle manipulation attack on the community-managed YieldBlox DAO Blend V2 Pool.
At this we point we can share that all depositors in the YieldBlox lending pool will be FULLY COMPENSATED for any losses resulting from bad debt incurred by the pool.
What this means:
- All EURC, USDC, and XLM depositors in the YieldBlox Lending Pool will be fully compensated.
- For Wallets: Users depositing into the YieldBlox Lending Pool will be fully compensated.
- For Protocols integrated with the YieldBlox Lending Pool: Users will be fully compensated through the protocol team.
This announcement does not apply to users affected by liquidations or backstop depositors - more information pertaining to those users will be shared at a later point.
Stay tuned for further updates.
If you are an affected wallet or protocol and have questions or would like to discuss next steps, please reach out on the Blend Discord or DM us here on X.
English

@RaulOrt68858857 Nothing is needed at this time. An update will be shared once the remediation effort is finalized
English

@script3official What do we need to do to get our money back? How do we claim it? Thank you very much.
English

@Just_2_Cool @RaulOrt68858857 This is a scam. This is not Markus. Do not DM.
English

@RaulOrt68858857 You don’t have to do anything, just dm me your address and your re fund will be sent.
English

To clarify:
This incident was isolated to a single asset in a single community managed pool.
No other Blend pools are vulnerable to the same oracle manipulation vector. There are no vulnerabilities in the Blend smart contracts.
Blend allows pool creators to choose their own oracles and oracle implementations.
In addition - the attacker exploited a short window where liquidity was temporarily removed from the market to place an abnormal trade - that, in addition to there being no other trades during a 15 minute window, made the manipulation possible.
pashov@pashov
🚨DeFi project Blend (Stellar blockchain) was exploited for $10.5M+ yesterday. Root cause - price manipulation of a virtually zero liqudity asset. Attacker inflated USTRY price 100x, price oracle reported collateral as 100x more valuable, so attacker borrowed >$10M and ran away.
English

@bleachsreaper @in_reflector We have reached out to the actor and are currently working toward a resolution.
We do not have a definitive timeline we can share yet.
English

@script3official @in_reflector When the money can return to victim?
English

Clarity on the recent oracle manipulation involving the community-ran YieldBlox DAO Pool on Blend V2.
NO ADDITIONAL FUNDS ARE AT RISK - BLEND SMART CONTRACTS DO NOT HAVE A VULNERABILITY.
Please read @in_reflector's thread below that details the manipulation.
reflector@in_reflector
Today @blend_capital YieldBlox pool has been exploited using price manipulation of the USTRY asset. Most of the stolen funds are frozen, so now we can provide more details from our side. x.com/script3officia…
English

@xBullCorp We are extremely lucky to be working with partners like @xBullCorp 💜
English

We still believe and trust the Blend protocol,
We will continue using it,
We are still building on #Stellar,
And this was just a speed bump.
Stay safe out there and keep building! 🫡
English
Script3 retweeté

A quick updated about our tokenized vaults!
Last night, there was a price manipulation attack that affected one of @blend_capital pools. One pool that our tokenized vaults $bUSDC and $bEURC use, meaning that both vaults suffered losses in their positions. 🧵
English

A detailed post mortem is coming soon.
Though, if you have any questions or concerns at this moment, tag us here or join our Discord:
discord.com/invite/a6CDBQQ…
English


