{"id":434901,"date":"2026-01-21T09:25:00","date_gmt":"2026-01-21T09:25:00","guid":{"rendered":"https:\/\/themarketperiodical.com\/?p=434901"},"modified":"2026-01-21T08:27:44","modified_gmt":"2026-01-21T08:27:44","slug":"lexploit-de-makina-finance-draine-5-millions-de-dollars-le-robot-mev-sempare-de-41-millions-de-dollars","status":"publish","type":"post","link":"https:\/\/themarketperiodical.com\/fr\/2026\/01\/21\/lexploit-de-makina-finance-draine-5-millions-de-dollars-le-robot-mev-sempare-de-41-millions-de-dollars\/","title":{"rendered":"L&#8217;exploit de Makina Finance draine 5 millions de dollars, le robot MEV s&#8217;empare de 4,1 millions de dollars"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">Aper\u00e7u des principaux \u00e9l\u00e9ments<\/h3>\n\n<ul class=\"wp-block-list\">\n<li>Makina Finance aurait perdu environ 5 millions de dollars \u00e0 cause d&#8217;un contrat intelligent.<\/li>\n\n\n\n<li>Un bot de Mev a fait front \u00e0 l&#8217;attaquant, empochant 4,1 millions de dollars gr\u00e2ce \u00e0 l&#8217;incident.<\/li>\n\n\n\n<li>Makina Finance confirme l&#8217;attaque mais pr\u00e9cise qu&#8217;elle est isol\u00e9e tout en prenant des pr\u00e9cautions.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">Le protocole DeFi Makina Finance a perdu environ 5 millions de dollars en raison d&#8217;un exploit de contrat intelligent. La soci\u00e9t\u00e9 Certik, sp\u00e9cialis\u00e9e dans la s\u00e9curit\u00e9 de la blockchain, a signal\u00e9 l&#8217;attaque lundi soir. <\/p>\n\n<p class=\"wp-block-paragraph\">Il a indiqu\u00e9 que les fonds avaient \u00e9t\u00e9 drain\u00e9s de l&#8217;un des pools de Makina Finance. L&#8217;incident a touch\u00e9 le pool Dialectic USD DUSD\/USDC stableswap de Makina. <\/p>\n\n<h2 class=\"wp-block-heading\">Comment l&#8217;attaque s&#8217;est-elle produite ?<\/h2>\n\n<p class=\"wp-block-paragraph\">Selon <a href=\"https:\/\/x.com\/certikalert\/status\/2013473512116363734?s=46\">Certik<\/a>, l&#8217;exploit se produit lorsque l&#8217;attaquant utilise un pr\u00eat flash pour manipuler l&#8217;oracle Makina Finance. Avec un pr\u00eat flash de 280 millions de dollars USDC, l&#8217;attaquant a utilis\u00e9 170 millions de dollars pour manipuler l&#8217;oracle MachineShare. Ce dernier d\u00e9termine le prix du pool DUSD\/USDC.  <\/p>\n\n<p class=\"wp-block-paragraph\">Le pirate a ainsi pu \u00e9changer les 110 millions d&#8217;USDC restants pour vider le pool d&#8217;environ 5 millions d&#8217;USDC. L&#8217;ing\u00e9nieur en s\u00e9curit\u00e9 de Certik, <a href=\"https:\/\/x.com\/hklst4r\/status\/2013496328051998794?s=46\">nobody<\/a>, a expliqu\u00e9 plus en d\u00e9tail comment l&#8217;attaque s&#8217;est produite, en soulignant la nature unique de la r\u00e9serve de DUSD. <\/p>\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"546\" height=\"596\" src=\"https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/9270e3a27fba325eba0f6f3b4bc46b3cefe8f10b28b89aa50c8ff809acb523ec-1.png\" alt=\"Source : X\" class=\"wp-image-434862\" srcset=\"https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/9270e3a27fba325eba0f6f3b4bc46b3cefe8f10b28b89aa50c8ff809acb523ec-1.png 546w, https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/9270e3a27fba325eba0f6f3b4bc46b3cefe8f10b28b89aa50c8ff809acb523ec-1-275x300.png 275w, https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/9270e3a27fba325eba0f6f3b4bc46b3cefe8f10b28b89aa50c8ff809acb523ec-1-150x164.png 150w, https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/9270e3a27fba325eba0f6f3b4bc46b3cefe8f10b28b89aa50c8ff809acb523ec-1-300x327.png 300w\" sizes=\"auto, (max-width: 546px) 100vw, 546px\" \/><figcaption class=\"wp-element-caption\">Source : X  <\/figcaption><\/figure>\n\n<p class=\"wp-block-paragraph\">Le pool dispose d&#8217;une fonction &#8220;updateTotalAum&#8221; qui permet de mettre \u00e0 jour sans autorisation le prix du jeton DUSD. L&#8217;attaquant a donc eu les coud\u00e9es franches. <\/p>\n\n<p class=\"wp-block-paragraph\">Ils ont \u00e9crit :<\/p>\n\n<p class=\"wp-block-paragraph\">Il pense donc que c&#8217;est une combinaison d&#8217;un pr\u00eat flash et d&#8217;une mise \u00e0 jour de l&#8217;AUM sans permission qui a permis l&#8217;exploit. Le pirate a ex\u00e9cut\u00e9 l&#8217;exploit en une seule transaction. Il a actualis\u00e9 l&#8217;oracle des prix au milieu de la transaction. Cette action leur a permis de mener \u00e0 bien l&#8217;attaque.   <\/p>\n\n<p class=\"wp-block-paragraph\">Les rapports sur le montant perdu varient d&#8217;une entreprise de s\u00e9curit\u00e9 de la blockchain \u00e0 l&#8217;autre. Alors que Certik l&#8217;\u00e9value \u00e0 environ 5 millions de dollars, Peckshield parle de 4,13 millions de dollars. GoPlus avance le chiffre de 5,1 millions de dollars. <a href=\"https:\/\/x.com\/tenarmoralert\/status\/2013460083078836342?s=46\">TenArmor<\/a> a indiqu\u00e9 qu&#8217;il s&#8217;agissait d&#8217;environ 4,2 millions de dollars.  <\/p>\n\n<p class=\"wp-block-paragraph\">Il est int\u00e9ressant de noter que l&#8217;attaquant ne s&#8217;est pas empar\u00e9 de la majeure partie des fonds vol\u00e9s gr\u00e2ce \u00e0 un robot MEV qui a men\u00e9 la transaction. Le robot portant l&#8217;adresse 0xa6c2 \u00e9tait sur le point de pr\u00e9lever 4,1 millions de dollars sur le fonds commun par le biais d&#8217;une s\u00e9rie de transactions. Il a maintenant d\u00e9plac\u00e9 les fonds vol\u00e9s vers deux nouvelles adresses.  <\/p>\n\n<h2 class=\"wp-block-heading\">Makina Finance confirme l&#8217;existence d&#8217;une faille, mais pr\u00e9cise qu&#8217;il s&#8217;agit d&#8217;une faille isol\u00e9e<\/h2>\n\n<p class=\"wp-block-paragraph\">Le <a href=\"https:\/\/x.com\/makinafi\/status\/2013502372505624608?s=46\">protocole DeFi<\/a> a confirm\u00e9 le piratage, pr\u00e9cisant qu&#8217;il s&#8217;agit d&#8217;un incident isol\u00e9 qui n&#8217;affecte pas l&#8217;ensemble de ses pools. Le protocole a demand\u00e9 aux fournisseurs de liquidit\u00e9s pour le pool DUSD Curve de retirer leurs liquidit\u00e9s. <\/p>\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"548\" height=\"576\" src=\"https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/15422b9e55b5c2a98532964b2ba159e84f46d01a656dc387f8babfc9724e18fc-1.png\" alt=\"Source : X\" class=\"wp-image-434861\" srcset=\"https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/15422b9e55b5c2a98532964b2ba159e84f46d01a656dc387f8babfc9724e18fc-1.png 548w, https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/15422b9e55b5c2a98532964b2ba159e84f46d01a656dc387f8babfc9724e18fc-1-285x300.png 285w, https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/15422b9e55b5c2a98532964b2ba159e84f46d01a656dc387f8babfc9724e18fc-1-150x158.png 150w, https:\/\/themarketperiodical.com\/app\/uploads\/2026\/01\/15422b9e55b5c2a98532964b2ba159e84f46d01a656dc387f8babfc9724e18fc-1-300x315.png 300w\" sizes=\"auto, (max-width: 548px) 100vw, 548px\" \/><figcaption class=\"wp-element-caption\">Source : X  <\/figcaption><\/figure>\n\n<p class=\"wp-block-paragraph\">Le texte est le suivant :<\/p>\n\n<p class=\"wp-block-paragraph\">Il est int\u00e9ressant de noter que le protocole a \u00e9galement indiqu\u00e9 qu&#8217;il avait activ\u00e9 le mode s\u00e9curit\u00e9 sur toutes les machines. Toutefois, il continue d&#8217;enqu\u00eater sur l&#8217;incident et pr\u00e9voit de communiquer les prochaines \u00e9tapes pour les personnes concern\u00e9es. <\/p>\n\n<p class=\"wp-block-paragraph\">Cet incident met en \u00e9vidence les nombreuses vuln\u00e9rabilit\u00e9s auxquelles les protocoles DeFi continuent d&#8217;\u00eatre confront\u00e9s malgr\u00e9 les progr\u00e8s r\u00e9alis\u00e9s. Cette ann\u00e9e, plus de trois plateformes DeFi ont perdu des fonds. Trubit a \u00e9t\u00e9 victime de vuln\u00e9rabilit\u00e9s exploit\u00e9es. Le protocole YO a subi des pertes dues \u00e0 des erreurs humaines.   <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Aper\u00e7u des principaux \u00e9l\u00e9ments Le protocole DeFi Makina Finance a perdu environ 5 millions de dollars en raison d&#8217;un exploit de contrat intelligent. La soci\u00e9t\u00e9 Certik, sp\u00e9cialis\u00e9e dans la s\u00e9curit\u00e9 de la blockchain, a signal\u00e9 l&#8217;attaque lundi soir. Il a indiqu\u00e9 que les fonds avaient \u00e9t\u00e9 drain\u00e9s de l&#8217;un des pools de Makina Finance. L&#8217;incident \u2026<\/p>\n","protected":false},"author":59,"featured_media":434869,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tmp_editor_id":0,"tmp_editor_role":"Edited by","footnotes":""},"categories":[3233,3177,3170,77,3240,78],"tags":[4097,6899,6486,6900],"class_list":["post-434901","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actualites-des-altcoins","category-crypto-fr","category-crypto-monnaie","category-nouvelles","category-nouvelles-sur-les-cryptomonnaies-fr","category-nouvelles-sur-les-cryptomonnaies","tag-escroqueries-sur-les-cryptomonnaies","tag-finances","tag-nouvelles","tag-tendances-du-marche"],"_links":{"self":[{"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/posts\/434901","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/users\/59"}],"replies":[{"embeddable":true,"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/comments?post=434901"}],"version-history":[{"count":3,"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/posts\/434901\/revisions"}],"predecessor-version":[{"id":434904,"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/posts\/434901\/revisions\/434904"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/media\/434869"}],"wp:attachment":[{"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/media?parent=434901"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/categories?post=434901"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/themarketperiodical.com\/fr\/wp-json\/wp\/v2\/tags?post=434901"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}