POPA Recon@secured_fi hacked for $105K
@secured_fi hacked for $105K RootCause: collateral is valued off getMarketUnitPrice() (OrderBookLib), which is just blockTotalAmount / blockTotalFutureValue for orders filled in the current block. Both sides are attacker-controlled, so you self-trade the price up to near par, your fake lend position gets counted as real collateral, and you withdraw the pool. The "isReliableBlock" guard is useless against a flash loan. @EthSecurity1
The excerpt is quoted from a public Telegram channel, which owns its text.