Enso Finance DPI Strategy Vault Loses Approximately 5.6 ETH, Contract Deprecated for 4 Years

Enso Finance's DPI Strategy Vault has incurred a loss of approximately 5.6 ETH due to an oracle price calculation error. The loss was caused by a flaw in the valuation chain, leading to price calculations that closely approximated real-time quotes, lacking TWAP consistency checks and price range validations, along with an imbalance in the liquidity of the Uniswap V3 pool used for pricing. An attacker exploited this vulnerability to exchange 0.683 WETH for 268.42 FARM on Uniswap V2, while the imbalanced V3 pool erroneously valued this transaction at 6.3 WETH. The attacker then minted excess shares at this incorrect price and redeemed them for profit. Enso stated that the involved contract has been deprecated for over 4 years, and users were previously advised to withdraw through official channels. The current infrastructure does not utilize these contracts and has undergone more than 12 production environment audits.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.