The community behind the decentralized finance (DeFi) aggregator ParaSwap has taken a significant step by agreeing to utilize funds from its treasury to compensate victims of a recent hack. This decision was reached following a proposal put forward by the ParaSwap Decentralized Autonomous Organization (DAO) on April 4. After a three-day voting period, an overwhelming 96.81% of ParaSwap voters supported the DAO's plan to provide compensation to users affected by the vulnerability in the AugustusV6 contract.
The vulnerability in the ParaSwap AugustusV6 contract, launched temporarily on March 18, aimed to enhance exchange efficiency and reduce gas fees. However, this upgrade inadvertently exposed a critical vulnerability that hackers exploited to siphon funds from users who had approved the upgrade. While swift action prevented potential losses amounting to $3.4 million, approximately $864,000 in assets were still lost during the incident.
ParaSwap has been working diligently with blockchain analytics and security firms like Chainalysis and TRM Labs to trace the movements of the stolen funds and identify the addresses of the hackers. The ParaSwap Foundation has committed to covering the remaining costs associated with the vulnerability, including refunds, engaging security analysts, contract re-examination, liaising with authorities, and executing the refund process.
On April 4, ParaSwap announced the successful recovery of approximately $500,000 in assets. This recovery effort has significantly reduced the amount of funds still unaccounted for, marking a 63% reduction in the total loss incurred by affected users. While the losses were substantial, with millions of dollars at stake, the return of 52.8% of the stolen funds represents a notable step towards mitigating the impact of the hack. Most of the recovered funds were sourced from security incidents related to non-fungible token (NFT) games based on the Blast Network Munchables platform.
