Dango has successfully navigated a recent security incident, confirming the full return of exploited funds following the cooperation of the attacker, who has now been recognized as a white hat. This swift resolution ensures that all affected users will be made whole, underscoring the protocol's commitment to security and user trust.
The Exploit's Origin and Mechanics
The security breach originated from a critical flaw within Dango's insurance fund donation logic. The vulnerability allowed users to "donate" to the insurance fund without a positive amount verification, which the attacker exploited to drain USDC collateral from the protocol's perpetuals contract. Despite the breach, Dango quickly identified that the core trading functions, such as order matching or liquidations, remained unaffected, containing the scope of the vulnerability.
Containment, Recovery, and White Hat Action
Crucially, built-in bridge rate limits played a vital role in mitigating the impact, preventing the attacker from fully withdrawing the exploited funds. While approximately $410,010 USDC was bridged to Ethereum, an additional $1.49 million remained securely on-chain. This containment allowed Dango to pause the chain and coordinate with security partners. In a significant turnaround, the attacker returned all funds and was subsequently awarded a bug bounty, leading Dango to recognize them as a "white hat" for their role in identifying the flaw and facilitating recovery.
Rebuilding with Enhanced Safeguards
With the incident fully resolved and user funds confirmed safe, Dango is now focused on fortifying its defenses. The protocol is preparing to resume operations shortly, having deployed additional safeguards to prevent similar vulnerabilities in the future. While the points program has been temporarily postponed, the quick recovery and commitment to enhanced security measures highlight Dango's resilience and dedication to its community.
