Platypus, a decentralized finance (Defi) company, has developed a customer damages plan that cost nearly $8.5 million in a previous lightning loan attack, seriously affecting its relatively stable exchange rate rules and regulations pegged to the dollar.

In a tweet on Feb. 18, Platypus stated that it had developed a liability plan and asked customers not to be aware of the damage caused by these people in the agreement, saying it would make it difficult for companies to manage the situation. According to the protocol, the liquidation of assets was suspended again:

According to the company, different parties, including senior inspectors, have participated in the whole process of recovering the funds at this stage. Platypus stressed that further details of the next steps will be released soon.

Some of the money is locked in AAVE contracts. The platypus has explored a possible way to get the money back, which will require approval of a recycling proposal at the AAVE governance seminar.

Blockchain security company CertiK first reported the flash attack on the platform in an article on Feb. 16, with a detailed address of the known attacker's contract. Nearly $8.5 million was removed from the contract, and it turned out that the platypus dollar (USP) was steadily pegged to the dollar, falling to 33 cents at the time of writing.

"attackers used lightning loans to take advantage of a logic error in the USP capital adequacy check mechanism in contracts with collateral," the company said. " Clearly identified a potential sex suspect.

A professional autopsy conducted by Omniscia, a financial audit company, showed that the attack was mainly caused by incorrect codes placed after the financial audit. Omniscia financially audited a version of the MasterPlatypusV1 contract during the period from 21 November to 5 December 2021. However, this version "does not contain comprehensive integration points with the treasure chest of external service platforms" and therefore does not contain disordered lines of code.

The flash attack takes advantage of the smart contract security on the platform to raise a lot of money without any collateral. Once digital money property is controlled in one trading center, it will naturally be sold in another trading center, so that exploiters can profit from price manipulation.