Lien Finance Hit with $542,000 Security Breach

Lien Finance has suffered a significant security breach, resulting in losses totaling $542,144.63. The attack targeted the bond exchange mechanism in Lien Finance's protocol, allowing an attacker to create unbacked assets and drain liquidity from the protocol.

The vulnerability exploited by the attacker allowed new tokens to be minted without destroying the input bonds, which were then exchanged for real $USDC liquidity. SlowMist security firm identified the wallet address used by the attacker as 0x0d7d...1808a.

On-chain analysis revealed that permissionless bond registration and pricing vulnerabilities enabled the attack. The attacker created malicious bonds containing a payment function, which were then routed to Lien Finance's OTC pools and replaced with actual $USDC liquidity.