Maya Zehavi, blockchain consultant, and Zubin Koticha, cofounder and CEO of Opyn, discuss the two recent bZx attacks, whether they were hacks or arbs and whether they were unethical or illegal. They also look at whether flash loans are to blame, how much transparency DeFi teams should have about vulnerabilities on their platforms, how much bug bounties should be for DeFi, and whether flash loans means the amount of bug bounties should be higher. We also talk about whether DeFi should institute circuit breakers, when those would make sense, and whether these attacks could happen to anybody or whether bZx isn't up to the standards needed in this community. We also cover how bZx should handle the under-collateralized loans left on their platform, whether Chainlink will be a sufficient solution to prevent these attacks in the future, and whether DeFi insurance should cover these kinds of attacks. Plus, Maya and Zubin explains why they're happy the attacks happened and have made them more optimistic. And Maya reveals why she has a pizza slice emoji in her Twitter profile.
Thank you to our sponsors!
CipherTrace:
https://ciphertrace.comCrypto.com:
https://crypto.com/
Kraken:
https://www.kraken.comEpisode links:
Maya Zehavi:
https://twitter.com/mayazi
Zubin Koticha:
https://twitter.com/snarkyzk
Opyn:
https://opyn.co/
Description of first attack:
https://www.theblockcrypto.com/post/56171/bzx-exploit-former-google-engineer-explains-how-an-attacker-made-350k-in-single-transactionDescription of second attack:
https://www.theblockcrypto.com/post/56171/bzx-exploit-former-google-engineer-explains-how-an-attacker-made-350k-in-single-transaction
https://www.theblockcrypto.com/daily/56413/experts-weigh-in-on-bzx-attacks-flash-loans-highlight-the-need-to-improve-defi-security-models
https://www.theblockcrypto.com/linked/56134/defi-lending-protocol-bzx-exploited-a-portion-of-eth-lost
Unconfirmed episode about the attacks:
https://unchainedpodcast.com/how-2-defi-attacks-made-almost-1-million-in-profit/
1inch.exchange blog post:
"" rel="noopener noreferrer">href="https://medium.com/@1inch.exchange/yes-we-hacked-bzx-fulcrum-but-one-month-ago-3f7e5c437ee3
" target="_blank" rel="noopener
https://medium.com/@1inch.exchange/yes-we-hacked-bzx-fulcrum-but-one-month-ago-3f7e5c437ee3
" rel="noopener noreferrer">noreferrer">https://medium.com/@1inch.exchange/yes-we-hacked-bzx-fulcrum-but-one-month-ago-3f7e5c437ee3
1inch exchange-Fulcrum dispute:
https://www.theblockcrypto.com/post/56579/bzx-attacks-and-1inch-exchange-allegations-heres-what-the-teams-have-to-sayNexus Mutual payouts:
https://defirate.com/nexus-mutual-first-payouts/
Nexus Mutual blog post:
https://medium.com/nexus-mutual/bzx-flash-loan-event-55753d19e52b