Amber Group: Critical Vulnerability in Mai Finance's Vault Has Been Fixed

Amber Group tweeted that the blockchain security team at Amber Group discovered a critical vulnerability in two Mai Finance's vaults (SCSEMVT and YCSEMVT) on Oct 18th, 2022. This vulnerability would allow an attacker to manipulate the collateral price, borrow all the funds from the pool, and walk away with bad debts.

Amber Group contacted the QiDao team on Oct 19th. The QiDao team confirmed the issue, came up with a fix, and deployed a new oracle contract on Oct 20th.