On the synthetic assets decentralised finance (DeFi) platform Mirror Protocol, a discrepancy in the reported price of underlying assets has resulted in an ongoing attack that has the ability to drain all of its cash. Mirror user, a governance participant on the Protocol forum, discovered the attack on Sunday. As of this writing, the synthetic asset pools Mirror BTC (mBTC), Mirror Polkadot (mDOT), Mirror Ether (mETH), and Mirror Galaxy (mGLXY) using the Protocol have lost nearly all of their assets worth over $2 million.
In May, both Venus Protocol and Blizz Finance were victims of a similar attack when the price of oracle Chainlink’s stated LUNA price stayed at $0.10 while the market price dropped dramatically. Blizz Finance was completely depleted, while Venus suffered an $11.2 million loss. The Mirror vulnerability will infect the other “m” asset pools by roughly 8:00 a.m. UTC on Tuesday, according to Terra community whistleblower FatMan on Twitter. The account further states that if the developers act to solve the flaw, most of the pools can be preserved.