Assets Removed from Osmosis

    On June 8th, a critical bug was found on Osmosis that led to the theft of several million dollars from liquidity pools. In an effort to help provide the Osmosis team with important data, we’ve curated these flash bounties to surface metrics that the team has requested. The upgrade that contained the exploited bug occurred at block height 4707300, and the chain was halted at block 4713064. What was the total dollar amount of assets that was improperly removed from pools due to the bug, and what is the list of addresses that had joined a pool since the upgrade? What is the dollar value deposited of those addresses joining pools? What is the cumulative value of funds that joined and exited?

    Loading...
    Loading...
    Loading...
    Loading...
    Loading...

    Introduction and Methodology

    Osmosis was built on top of another blockchain the Cosmos. It makes use of IBC, which is inter blockchain communication and helps to facilitate cross-chain transactions. What this means is that Osmosis is a DEX, decentralized exchange that is designed specifically for Cosmos, with the hope to spread to other blockchains in the future.

    There was a hack in Osmosis during block periods 4707300-4713064, before it was halted. The goal was to find out information that happened during this time in terms of users, deposits, and withdrawals.

    To go about finding this information we had to find the different currencies involved and who was sending them in and out of the blockchain. We will look into the amount of currency that is the most taken out and show what the value is as well. We will also look into the different accounts that joined numerous pools

    Loading...

    These two visuals are going to go over the amount deposited by the top 10 address's during the block time period and then look into the currency that was most traded and their value. There were three major accounts that had deposited the most over the block_id time specified. You can also see that there was only one currency that was mainly used on Osmosis.

    The next two visuals are going to look into the amount that was removed by different address's and how much was removed. There were two address's that removed the most amount and equal nearly 50% of all assets removed during the time of the bug. They were also not amount the most to deposit meaning they were most likely able to make considerable amount of money.

    These last two visuals are going to explain who was joining what pools during this time as well. The table will give specific information on how many different pools were joined by these specific accounts.

    Conclusion

    -- There were three accounts that deposited the most over this time

    -- There were two accounts that were about nearly 50% of the amount of money removed

    -- The same currency was used for the most deposits and transfers during this time