BT Finance + Growth DeFi (two separate hacks, one article): BT Finance: Flash Loan Price Manipulation; Growth DeFi: Fake Token LP Injection
Two yield aggregators fell in one day — BT Finance via the same flash-loan-plus-earn trick that had already killed Harvest and Value DeFi, and Growth DeFi via a more exotic fake token LP injection that drained $1.3M by staking worthless AXXZ tokens alongside real GRO.
Summary #
BT Finance + Growth DeFi (two separate hacks, one article) suffered a Yield Aggregator (both) on 2021-02-09, resulting in a loss of approximately $2M.
What happened #
Two yield aggregators fell in one day — BT Finance via the same flash-loan-plus-earn trick that had already killed Harvest and Value DeFi, and Growth DeFi via a more exotic fake token LP injection that drained $1.3M by staking worthless AXXZ tokens alongside real GRO.
Linked factors #
- RD-F-007 — related : Bug bounty absent — baseline integrity gap [via dashboard_risk_factors/Bug bounty: Unknown (both)]
- RD-F-099 — illustrative : Oracle price deviation > X% from secondary source — RT signal would have fired [via realtime_signals/Oracle anomaly: Y (BT Finance — price manipulation is oracle/reserve anomaly)]
- RD-F-100 — illustrative : Flash loan > $10M origination — RT signal [via realtime_signals/Unusual borrowing: Y (BT Finance — large flash loan)]
- RD-F-111 — causal : Team doxx status — pseudonymous-no-track-record class [via dashboard_risk_factors/Team anonymity: Unknown]
- RD-F-126 — causal : Is-a-fork-of (Cat 8 anchor) [via dashboard_risk_factors/Forked?: Y — both are yield aggregator forks of common patterns]