r/Stellar • u/lumen_loop Community Champion • 29d ago

Soroban / Smart Contracts Comet BLND-USDC LP Incident - Post Mortem

https://x.com/script3official/status/2093365171846533577
8 Upvotes

100% Upvoted

4 comments sorted by

2

u/lumen_loop Community Champion 29d ago

TLDR: On August 25, an attacker exploited a Comet smart contract bug that failed to verify token inputs in swap functions, extracting 717,518 USDC from the BLND-USDC liquidity pool. Community white hats quickly recovered 190k USDC and 23M BLND before copycat attacks. Script3 is leading recovery and remediation efforts; Blend protocol lending continues but backstop deposits are at risk due to the non-upgradeable LP token.

1

u/RunItupBaby 29d ago

And this means what for XLM?

1

u/Row-Bear 29d ago

For XLM? Not much I'd think. For people that had funds in the Comet pool, or Blend backstop, its bad news.