BlockSec recently verified that the Blueberry Protocol encountered an attack via X/Twitter. The blockchain security platform suspects the attack stemmed from inconsistent token price normalization logic, leading to a mismatch between different price sources and their normalization methods. Blueberry Protocol also confirmed the news via a series of tweets, notifying users of an ongoing exploit reported by Peckshield, another reputable blockchain security firm.

The attack resulted in the platform's frontend going offline, prompting Blueberry to advise users to withdraw their assets if they could interact directly with the contracts. Blueberry later identified the perpetrator as coffeebabe_eth, whose account was not found on X/Twitter or other social platforms. However, Blueberry assured users that the drained funds were secure in the Blueberry multisig, with only the validator payment missing.

Blueberry has been in constant communication with communication and security professionals and plans to reimburse the remaining 91 Ether through the validator. Consequently, the breach led Blueberry to temporarily halt its platform operations until further notice. A comprehensive post-mortem detailing the breach will be released soon. As of now, Blueberry has confirmed that the total drained assets amounted to 457.684573171942049193 (TX profit) and 1 (leftover value as bWETH), with associated costs/fees of 0.093022519261676367 (Gas Fees) and 91.038300317166143134 (Validator Payment).

The breach affected the markets for USDC, BTC, and OHM, while all other markets remain unaffected and operational. Despite the alarming news, the majority of the community has rallied behind Blueberry, appreciating their swift response in securing most of the funds. Users now await further updates on how the DeFi protocol will address the situation with the validator.