---
title: "Terra exploited for $6.8m due to reentrancy vulnerability: report"
url: https://diffcoin.com/terra-exploited-for-6-8m-due-to-reentrancy-vulnerability-report/
description: "Terra back in the news: the infamous protocol has reportedly been exploited for $6.8 million due to a vulnerability found in April this year"
published: 2024-07-31
updated: 2024-07-31
author: "Mila"
site: "Diffcoin"
---

# Terra exploited for $6.8m due to reentrancy vulnerability: report

Infamous blockchain protocol Terra has recently been allegedly exploited due to a vulnerability that was revealed months ago.

According to a Cyvers Alerts [post](https://twitter.com/CyversAlerts/status/1818550103000383984?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1818550103000383984%7Ctwgr%5E4709cb46fbacfe903040ad60b5f09a0e91f02803%7Ctwcon%5Es1_c10&ref_url=https%3A%2F%2Fcrypto.news%2Fwp%2Fwp-admin%2Fpost.php%3Fpost%3D14288430action%3Dedit) on X today, July 31, hackers have stolen 60 million ASTRO, 3.5 million USDC, 500,000 USDT and 2.7 Bitcoin (BTC) from the Terra blockchain. The total amount of reported losses has reached roughly $6.8 million.

> 🚨ALERT🚨[@terra_money](https://twitter.com/terra_money?ref_src=twsrc%5Etfw) was exploited, resulting in the theft of approximately 60M [$ASTRO](https://twitter.com/search?q=%24ASTRO&src=ctag&ref_src=twsrc%5Etfw), 3.5M [$USDC](https://twitter.com/search?q=%24USDC&src=ctag&ref_src=twsrc%5Etfw), 500K [$USDT](https://twitter.com/search?q=%24USDT&src=ctag&ref_src=twsrc%5Etfw), and 2.7 [$BTC](https://twitter.com/search?q=%24BTC&src=ctag&ref_src=twsrc%5Etfw).
> 
> The attacker took advantage of a reentrancy vulnerability in the timeout callback of ibc-hooks. 
> This vulnerability was revealed in April of this year.… https://t.co/56oTpg78Cv
> 
> — 🚨 Cyvers Alerts 🚨 (@CyversAlerts) [July 31, 2024](https://twitter.com/CyversAlerts/status/1818550103000383984?ref_src=twsrc%5Etfw)

Per the blockchain security company, hackers found a vulnerability in the network’s timeout callback of IBC hooks. This allows the attackers to execute a transaction repetitively that might potentially result in the loss of funds or minting extra tokens.

Cyvers Alerts claims that this vulnerability was “revealed in April of this year.”

Just hours before Cyvers Alerts’ X post, Terra’s official X page posted that the network was halted to “apply an emergency patch” due to an alleged exploit.

> The Terra chain has resumed block production at approximately 4:19 AM UTC today and the emergency chain upgrade is now complete.
> 
> Transactions are now being processed, and users may resume normal activities.
> 
> Validators holding over 67% of the voting power on Terra have upgraded…
> 
> — Terra 🌍 Powered by LUNA 🌕 (@terra_money) [July 31, 2024](https://twitter.com/terra_money/status/1818552290372206614?ref_src=twsrc%5Etfw)

At 07:40 UTC, Terra announced that the blockchain had resumed its operations and the emergency upgrade had been completed. The X post added:

> “Transactions are now being processed, and users may resume normal activities.”

However, Terra did not share the details and the amount of assets lost yet.

Notably, the ASTRO price suddenly plunged by 60% after Terra halted the network operations.

[Source link](https://crypto.news/terra-exploited-for-6-8m-due-to-reentrancy-vulnerability-report/)