Makina hacking progress: Only the Curve pool affected, officials have identified clues of the attack

【Blockchain Rhythm】The multi-chain DeFi execution engine Makina was hacked yesterday (January 21), and the official has announced the latest updates.

The scope of this attack was narrower than expected—only users providing liquidity to the Curve DUSD/USDC pool were affected. In other words, if you hold DUSD, Pendle, or Gearbox positions, this incident will not impact you.

Liquidity providers in the compromised pool need to take immediate action. Makina’s official advice is: unilateral withdrawal to DUSD and wait for further notice. The team is urgently addressing the issue, planning to disable the recovery mode and re-enable the redemption function.

From a technical perspective, the attack resulted in a loss of 5,107,871 USDC. The hacker manipulated the pool’s price, artificially inflating the asset book value of liquidity providers, and then carried out arbitrage attacks to steal funds.

It is worth noting that Makina took a snapshot of the Curve DUSD/USDC pool before the attack, providing data support for subsequent compensation and recovery efforts. More importantly, the team has obtained key clues about the hacker’s identity and is actively communicating with the attacker. How this develops will be worth watching.