Velocore, a decentralised exchange (DEX) operating on zkSync and Linea blockchains, recently fell victim to $10 million hack, targeting the platform's liquidity provider tokens. The vulnerability exploited involved manipulating fee calculations within Velocore's liquidity pools.
<h3 id="heading-behind-the-breach">Behind the Breach</h3>
The Velocore hack was executed by an attacker who exploited a flaw in the Continuous Product Market Maker (CPMM) mechanism used by Velocore. This mechanism, akin to Balancer's model, was intended to improve trading efficiency and security. However, the attacker manipulated the fee calculation logic, allowing them to drain liquidity pools without raising immediate alarms. The funds were then transferred across chains, ending up on the Ethereum mainnet, primarily converted to 700 ETH.
<hr />
Rivanorth is a boutique Web3 cybersecurity company. We specialise in smart contract audits and blockchain security advisory. Visit <a target="_blank" href="https://rivanorth.com/"><a href="https://rivanorth.com/" class="autolinkedURL autolinkedURL-url" target="_blank">rivanorth.com</a></a> to find out more.
You build the future. We help you secure it.

Velocore, a decentralised exchange (DEX) operating on zkSync and Linea blockchains, recently fell victim to $10 million hack, targeting the platform's liquidity provider tokens. The vulnerability exploited involved manipulating fee calculations within Velocore's liquidity pools.

### Behind the Breach

The Velocore hack was executed by an attacker who exploited a flaw in the Continuous Product Market Maker (CPMM) mechanism used by Velocore. This mechanism, akin to Balancer's model, was intended to improve trading efficiency and security. However, the attacker manipulated the fee calculation logic, allowing them to drain liquidity pools without raising immediate alarms. The funds were then transferred across chains, ending up on the Ethereum mainnet, primarily converted to 700 ETH.

---

Rivanorth is a boutique Web3 cybersecurity company. We specialise in smart contract audits and blockchain security advisory. Visit [**https://rivanorth.com/**](https://rivanorth.com/) to find out more.

You build the **future**. We help you **secure** it.

Hack Explained - Velocore

State of the art cybersecurity services, always a step ahead.
You build the future. We help you secure it.
