Demystifying DeFi Hacks: Reentrancy Attacks
Reentrancy attacks involve looping deposit and withdrawal requests in a smart contract to steal funds. An example is withdrawing from an ATM without the account balance being updated. The Fei/Rari attack resulted in $80m in losses and led to payouts for Rari Protocol Cover holders. Reentrancy vulnerabilities have caused several DeFi hacks, such as those in Curve, Vyper, Conic, Sturdy, and Sentiment. Nexus Mutual aims to educate more people about common attack types in DeFi.