Our team has been working overnight with Linea and Spearbit teams to mitigate the impact of our recent security exploit with good results. We are still in the process of executing mitigations and writing a full post-mortem, and will deliver updates as soon as it's safe to do so.
We are currently waiting for our recovery efforts to play out before we unpause markets, and are designing a robust risk-mitigation plan to re-open Astera for withdrawals. Rex33 depositors should be able to pay down their loans and withdraw very soon.
As part of this, we are arranging a means for users to acquire asUSD via escrow instead of directly from Etherex. This is because we've dramatically increased fees on asUSD pools to ensure the attacker can't use them as exit liquidity. For users who aren't comfortable with an OTC solution, we will continue to work on further options once the markets start unwinding.
Thanks to existing risk mitigation efforts, the amount of funds that the attacker received amounted to less than 5% of the total assets on Astera. We hope to reduce this number closer to 3% through our disaster recovery effort.
In the end, the cost of this exploit is around the same cost of a Tier-1 audit, and our team is motivated to continue pushing the protocol forward to ensure users can be made whole in a timely fashion & we can continue pushing the limits of DeFi credit infrastructure.
Astera has experienced a security exploit.
Our team confirmed the attack at 17:39 AEST and immediately paused the Core Pool and all Mini Pools.
Currently no deposits or withdrawals are possible.
We are working with our security partners to trace and recover funds. Full statement and details to follow.
Do not trade asUSD at this time as liquidity pool fees have been increased as part of the response.
REX33 deposits are unaffected.