Select Page

The coffers of Pickle Finance, a decentralized finance (DeFi) protocol with a native token that looks suspiciously like Pickle Rick, of Rick and Morty fame, were drained today of $20 million in what appears to be a hack.

Pickle Finance shifts investors’ money around different DeFi protocols to maximise returns, a little like a traditional robo-advisor. 

Yesterday, Pickle “deployed a new strategy” to maximise returns from DAI, a decentralized stablecoin pegged to the US dollar, “Larry the Cucumber,” a team member for Pickle, posted in a Discord chat, according to “statelayer.eth.”

Today, someone drained that wallet of $19.7 million in DAI. 

Specifically, someone drained Pickle Finance’s cDAI jar. cDAI are the tokens that decentralized lending protocol Compound issues its customers when they deposit DAI, a decentralized stablecoin pegged to the US dollar. 

But it doesn’t appear to be the kind of flash loan attack we typically see associated with protocol hacks on this scale. “Normally you’d see the tx calling Aave, Uniswap, or dYdX for the flash loan,” crypto analyst Nick Chong told Decrypt.

An unhappy Pickle Finance user, on Telegram

Following the hack, the price of Pickle Finance’s token, PICKLE, fell by 43.8%, according to Coin Gecko, to $12.75.

Pickle Finance Coin Gecko

Until it works out what’s going on, Harvest Finance, a rival DeFi protocol that last month was hacked for $30 million, has moved all of its DAI, as well as stablecoins USDC and USDC, “ to the safety of its vaults until the attack vector is understood,” tweeted Smokatoke, a community rep for Harvest Finance.

Source: decrypt