Over the week, Solana-based DeFi protocol Nirvana Finance suffered a flash loan attack, causing the stablecoin to depeg from $1.
Looks like @nirvana_fi got hacked. Someone drained the protocol via what looks like a flash loan attack for ~3mil USDT. They've sent it to ETH mainnet via wormhole, and converted it to DAI. #opsec #crypto #hack #cryptohack
— Andy D (@AndyBTC_) July 28, 2022
This is the eth address:https://t.co/KYmTqcxYZb
The hacker borrowed $10 million USDC from Solend’s flash loan to exploit $3.49 million USDT from the Nirvana Finance Treasury.
Both $NIRV (stablecoin) and $ANA (Nirvana Finance’s native token) dropped by 85% following the attack.

The people at SolanaFM gave a good breakdown of how the exploit happened:
- Hacker borrowed US$10 million USDC from Solend’s flash loan
- They use the borrowed fund to mint US$10 million worth of $ANA
- Hacker swapped the newly minted $ANA for $USDT and received US$3.5 million USDT from Nirvana Treasury
- They then return the $10 million USDC to Solend and transfer the full $3.5 million USDT into an ETH account.
1/ 🚨
— FA2 | SolanaFM (@0xFA2) July 28, 2022
On 28 July, adaptive yield protocol @nirvana_fi was exploited for $3.49M, forcing the protocol’s $ANA token price to collapse over 85%.
The SolanaFM team broke down the key movements involved during the exploit. 👇
Nirvana Hacker Account:https://t.co/Zsde5MdW0j pic.twitter.com/OYMMy2G1nb
The Nirvana team is now offering the hacker US$300,000 or 8.5% of the hacked amount as a whitehat bounty for the return of the treasury.
For the return of the treasury, the team would also stop all ongoing investigations in good faith.
To The Nirvana Hacker:
— Nirvana Finance (@nirvana_fi) July 28, 2022
On behalf of the Nirvana Finance community, we humbly ask that you return the stolen funds from our treasury. 1/5
Also Read:Â Are All Stablecoins Doomed To Crash? Stablecoin Fundamentals You Have To Know
[Editor’s Note: This article does not represent financial advice. Please do your own research before investing.]
Featured Image Credit:Â CoinCu News