DeFi Protocol Fluid Reports Hack Affecting Backend System, Promises Full Loss Coverage

According to ME News, on June 2 (UTC+8), the DeFi protocol Fluid released a report on the attack incident. The attacker exploited a vulnerability in components related to the Merkle reward distribution system, stealing approximately 163,706 FLUID and 49,526 GHO. The incident affected only the backend automated systems; the core protocol, smart contracts, and user funds remained unaffected. The attacker leveraged a remote code execution vulnerability in an internally ported Livewire library to obtain operational keys and submit a fraudulent Merkle root. The team has swiftly taken measures, including rotating keys, transferring remaining funds, and isolating affected systems. They are actively working to recover the stolen funds and have committed to fully covering all losses. The Merkle reward claiming function is expected to be restored within 10 days; rewards will continue to accumulate normally during this period, and users need take no action. (Source: Foresight News)