Astroport is a decentralised exchange (DEX) on the Terra blockchain, designed to facilitate seamless and permissionless trading of digital assets. Recently, Astroport suffered a significant hack resulting in a loss of approximately $6.4 million. The hack was primarily caused by a reentrancy vulnerability that was reintroduced during a recent code upgrade.
<h3 id="heading-behind-the-breach">Behind the Breach</h3>
The attack on Astroport exploited a reentrancy vulnerability within the timeout callback of the ibc-hooks. This type of vulnerability allows attackers to repeatedly call a function within a smart contract before the initial execution is complete, enabling them to drain funds.
Despite this vulnerability being patched previously, it was reintroduced in the June update.
Following the attack, Terra’s validators took the drastic step of halting the blockchain to prevent further losses and implemented an emergency upgrade to address the issue.
<hr />
Rivanorth is a boutique Web3 cybersecurity company. We specialise in smart contract audits and 360 degree security services for Web3. Visit <a target="_blank" href="https://rivanorth.com/"><a href="https://rivanorth.com/" class="autolinkedURL autolinkedURL-url" target="_blank">rivanorth.com</a></a> to find out more.
You build the future. We help you secure it.

Astroport is a decentralised exchange (DEX) on the Terra blockchain, designed to facilitate seamless and permissionless trading of digital assets. Recently, Astroport suffered a significant hack resulting in a loss of approximately $6.4 million. The hack was primarily caused by a reentrancy vulnerability that was reintroduced during a recent code upgrade.

### **Behind the Breach**

The attack on Astroport exploited a reentrancy vulnerability within the timeout callback of the ibc-hooks. This type of vulnerability allows attackers to repeatedly call a function within a smart contract before the initial execution is complete, enabling them to drain funds.

Despite this vulnerability being patched previously, it was reintroduced in the June update.

Following the attack, Terra’s validators took the drastic step of halting the blockchain to prevent further losses and implemented an emergency upgrade to address the issue.

---

Rivanorth is a boutique Web3 cybersecurity company. We specialise in smart contract audits and 360 degree security services for Web3. Visit [**https://rivanorth.com/**](https://rivanorth.com/) to find out more.

You build the **future**. We help you **secure** it.

Astroport DEX on Terra blockchain hacked due to reentrancy vulnerability, resulting in $6.4 million loss

Astroport Hack Details Uncovered

Hack Explained - Astroport

State of the art cybersecurity services, always a step ahead.
You build the future. We help you secure it.
