Rho Markets resumes operations after an Oracle misconfiguration

Rho Markets, a decentralized finance (DeFi) protocol operating on the Scroll-based liquidity layer, has resumed its operations following a significant incident involving an $7.6 million misconfigured oracle.

On July 19, Rho Markets was manipulated due to a misconfiguration in its price oracle, leading to an MEV (maximal extractable value) bot profiting $7.6 million in stablecoins prompting a series of responses and adjustments from the protocol.

Oracle misconfiguration and not a security breach

The entity behind the MEV bot that was responsible for extracting the funds communicated directly with the Rho Markets team via an on-chain message on July 19 clarifying that the profit was a result of a price oracle misconfiguration rather than a hack or exploit.

The bot operators expressed their intention to return the stolen funds but stipulated that the Rho Markets team acknowledge the incident as a misconfiguration rather than a security breach.

Affected Rho Markets pools reallocated funds

Despite the assurance that no funds were ultimately lost, the incident had a noticeable impact on the protocol’s credibility and total value locked.

Rho Markets has, however, vowed to rebuild trust within the community by making the necessary adjustments and improvements to its security infrastructure.

According to a statement issued on July 21, the team successfully completed simulations to repay all remaining funds to the affected pools.

Shortly thereafter, the protocol confirmed via social media that it was back online and that the funds had been allocated as promised.

Update from Rho Markets

We have successfully completed the fund allocation.

🔸The protocol is now officially back online.

Thank you very much for all the support and understanding from our Rho family.

— Rho Markets📜 | Rho.scroll (@RhoMarketsHQ) July 21, 2024

The incident saw the value of Rho Markets’ total assets plunge by 54% from $51 million to $23.4 million, significantly impacting the protocol’s total value locked, which currently stands at $24.6 million.

Rho Markets has pledged to enhance its security measures with the team committing to implementing additional third-party partners for improved security, which will include on-chain data monitoring and comprehensive smart contract audits.

Furthermore, the firm plans to bolster its internal security protocols through more rigorous internal reviews and simulation testing to prevent future incidents.

The timing of this incident coincided with a particularly tumultuous period for the crypto sector, which saw multiple high-profile breaches.

Notably, on July 18, crypto exchange WazirX was hacked, resulting in a theft of over $230 million. The Li.Fi protocol also experienced a security breach on July 16, with losses totaling $10 million.

As Rho Markets moves forward, the emphasis will be on restoring user confidence and fortifying its defenses against potential future vulnerabilities.

The protocol’s proactive measures and transparent communication aim to stabilize its position in the DeFi space and prevent similar occurrences.

The post Rho Markets resumes operations after an Oracle misconfiguration appeared first on Invezz