Linear Finance Attack: Liquidity Crisis As lUSD Drops to Zero

On September 21, 2023, Hong Kong-based decentralized finance (DeFi) platform, Linear Finance, faced a security breach that left its community reeling. The attacker, exploiting a vulnerability, minted an endless supply of lAAVE tokens. These were then swiftly exchanged for the protocol’s stablecoin, lUSD, on the Linear Exchange. The rapid sales of these tokens on platforms like PancakeSwap and Ascendex led the price of lUSD to plummet to zero.

Stellar (XLM) Silently Patched a 2.2 billion XLM Inflation Bug in 2017

The Sequence of the Attack

The attacker smartly executed their strategy by taking advantage of the limitless minting potential of the lAAVE tokens. Once they had an almost infinite supply, they traded these tokens for the Linear USD stablecoin (lUSD) on the Linear Exchange. They subsequently sold the stablecoins on popular exchanges, PancakeSwap and Ascendex. The relentless selling pressure caused the lUSD price to crash, effectively draining its liquidity.