ChainCatcher message, Exactly Protocol stated on social media that since the protocol was attacked, the hackers have consistently refused to communicate for four weeks. They have now contacted the U.S. Department of Homeland Security, which will assign a team of agents to handle the case.Exactly Protocol stated that the attackers can still choose to return all stolen funds in exchange for dropping the case; otherwise, they will pursue the matter to the end.

ChainCatcher news, the DeFi lending protocol Exactly Protocol has released a post-mortem analysis report on the hack. Exactly Protocol experienced a security vulnerability on August 18, resulting in approximately $7.6 million in economic losses, affecting 117 accounts. The root cause of the vulnerability was a flaw in the DebtManager peripheral contract, where insufficient input validation design and unchecked permission schemes facilitated the attackers. It has been confirmed that two attackers were involved in this incident. The main attacker stole the majority of the losses (97%), while the impersonator attacker took 3% of the losses.In addition, Exactly Protocol announced that it will collaborate with ABDK to conduct a formal audit of all protocols and peripheral contracts used in the web application, and looks forward to reintroducing these features in September.

ChainCatcher news, the DeFi lending protocol Exactly Protocol tweeted that it is collaborating with multiple teams, including Euler Labs. If there is no response from the attacker by tomorrow, a reward of $700,000 will be officially launched to incentivize the community to help resolve this issue.

ChainCatcher message, Exactly Protocol tweeted that the protocol suspension has been lifted, and users can perform all operations without any liquidation occurring. The hacker attack only affected users utilizing the peripheral contract (DebtManager), while those not using it were unaffected, and the protocol is still operating normally. Regarding the hacker and fund recovery efforts, the team is working on multiple fronts, and the latest updates will be continuously announced and voted on through the DAO. Currently, the team is drafting a post-mortem report, which will be shared with the community in the coming days.Previously, it was reported that Exactly Protocol suffered a cross-chain bridge attack, resulting in a loss of 7,106 ETH, approximately 12.04 million USD, and the team suspended the protocol to ensure user safety.

ChainCatcher message, DeFi lending protocol Exactly Protocol tweeted, "Yesterday, someone manipulated the DebtManager peripheral contract. The attacker passed in a malicious market contract address, bypassed the permission check, and executed a malicious deposit function, stealing the assets deposited by users. Approximately $7.3 million was stolen. A fix was proposed yesterday and approved by the governance multi-signature, which will be executed along with the lifting of the suspension on the protocol at 7:51 AM Beijing time on August 20. More detailed information about this vulnerability will be gradually disclosed through a post-mortem report.""We are currently trying to communicate with the attacker to return the stolen assets. We have reported to the police. In addition, our team is actively working with Chainalysis and other security experts to identify the attacker and take appropriate measures."

ChainCatcher news, Exactly Protocol announced that the protocol will lift the suspension at 11:51 PM UTC on August 19, and stated that relevant measures have been taken to strengthen the process.ChainCatcher previously reported that, according to monitoring by blockchain security company De.Fi, the DeFi lending protocol Exactly Protocol has lost over 7,160 ETH (approximately 12.04 million USD). To ensure user safety, the protocol has been suspended (users can still withdraw assets). The team is closely following this matter and will share more details as soon as possible.

ChainCatcher message, DeFi lending protocol Exactly Protocol tweeted, "We are actively investigating security issues within our protocol. To ensure user safety, the protocol has been temporarily paused (you can still withdraw assets). Our team is closely following this matter and will share more details as soon as possible."Previously, Exactly Protocol was hacked, with over 7160 ETH stolen (approximately 12.04 million USD).

ChainCacther news, according to monitoring by the blockchain security company De.Fi, the DeFi lending protocol Exactly Protocol has been hacked, with over 7,160 ETH (approximately 12.04 million USD) stolen. It has been confirmed that there are two malicious contracts that extensively called the kick() function.This attack appears to have been executed by injecting funds into an attack contract on Ethereum, then transferring the deposits to the Optimism network, and finally bridging the stolen funds back to the Ethereum network.

ChainCatcher message: According to the monitoring of the Beosin EagleEye security risk monitoring, early warning, and blocking platform under the blockchain security audit company Beosin, the Exactly Protocol project on the Optimism chain has been attacked. Beosin Trace has found that the loss from this incident is at least approximately 7 million USD. The Beosin security team reminds users to pay attention to the safety of their funds.

ChainCatcher message, according to the detection by Shield, the DeFi lending protocol Exactly Protocol is under attack, and users are advised to take necessary actions.The crypto hash value is as follows: 20bae0a96e90d5590a98bc81a16c2b1e8e96eba8248f266c244870d18232b258.Once the situation stabilizes, the real hash value will be announced.

ChainCatcher news, the DeFi lending protocol Exactly Protocol officially announced the launch of the Exactly DAO governance token EXA on the OP Mainnet. The airdrop claim has been opened since July 26, 00:00 Beijing time. The total supply of EXA is 10 million, with 1% of the total token supply (100,000 EXA) allocated for airdrops to early users of the project. This will be distributed to community members who have used the protocol on the OP Mainnet since the launch of the OP reward program in April last year, and there will be a 4-month linear unlocking period.Previous news, the DeFi lending protocol Exactly Protocol will launch Exactly DAO and the governance token EXA.

ChainCatcher news, DeFi lending protocol Exactly Protocol has published an introduction to the token EXA and Exactly DAO. The EXA airdrop rewards will be distributed on July 24th at 22:00 Beijing time.It is reported that the EXA token is the native governance token of Exactly DAO, with a total supply of 10 million tokens. The distribution plan is as follows: 4.5 million EXA allocated to the community, 4.5 million EXA allocated to the team, advisors, and investors, and 1 million EXA allocated to the DAO treasury. The community token distribution is divided into two parts, with 1% of the total token supply (100,000 EXA) allocated for airdrops to early users of the project, distributed to community members who have used the protocol on the OP mainnet since the launch of the OP reward program in April last year. EXA rewards will begin on July 24, 2023, distributing 5% of the total supply (500,000 EXA) to users through the current reward control contract and other incentive mechanisms.In addition, a new round of OP rewards will also begin. ExactlyDAO governance will be divided into off-chain voting and on-chain voting phases. The first ExaIP released by the team after the launch of ExactlyDAO will be a new interest rate model proposal that the team has been researching.

ChainCatcher news, the fixed income protocol Exactly Protocol announced the completion of a $2 million financing round, co-led by Synthetix founder Kain Warwick and Daedalus, Decentraland co-founder Esteban Ordano, with participation from Bodhi Ventures, Newtopia, NXTP Ventures, and Kaszek Ventures.Exactly Protocol offers DeFi lending products with fixed and variable interest rates, having launched on the Ethereum mainnet last November. The funds from this financing round will be used to expand the team and develop products. Exactly Protocol plans to launch on Optimism in the coming months.According to the crypto data platform RootData, the fixed income protocol Exactly completed a $3 million seed round led by the Latin American venture capital fund Kaszek in August 2021 (source link).