The decentralized equity financing (Defi) agreement Platypus released small details of the most recent use of $9.1 million worth of vulnerability detection, as well as efforts to recover funds and compensation packages for victims.

In a medium-to-medium article on February 23rd, the company revealed that there was a logical error in the USP capital adequacy check mechanism in the mortgage ownership contract, resulting in three different types of attacks by the same attacker. Platypus says Stableswap's business has not been compromised.

Many stables and other assets were stolen during the attack. In the first attack, about $8.5 million in assets were stolen. In the second incident, about 380000 of the assets were improperly sent to the AAVE v3 contract. The third attack resulted in the theft of about $287,000 in assets.

The platypus recovery plan will refund at least 63% of the funds from the main pool. After the attack, nearly 35.4 per cent of the money remained in the pool, and 2.4 million US dollars (USDC) or 17.7 per cent of the assets before the attack had been recovered. If the stolen funds are not recovered, an additional 1.4 million pounds (10.4 per cent of the assets before the attack) will be used to compensate LP for losses within six months. The company said:

We are now discussing with various parties that we can help rebuild the stable currency trapped in the attack contract. Once we have found all the relatively stable tokens, we will distribute the reminder tokens to the limited company on a pro rata basis.

The platypus is still working with the AAVE agreement to recover locked assets worth about $380000. A proposal to find money back will be voted on at AAVE's governance seminar. Once the proposal is approved, everyone will work with the AAVE team to establish a recycling contract, and the funds to be developed will be transferred from the AAVE pool to the Platypus contract. The company also mentioned:

If the comments we submit to AAVE are approved, and Tether confirms that it prompts Frozen Jie's USDT, we will be able to get back about 78% of our consumer money.

On Feb. 16, blockchain security company CertiK first reported flash attacks on this platform according to the article. The flash attack violates the security of smart contracts on the platform and raises a lot of money without collateral. According to CoinGecko, the attack resulted in a steady peg of platypus dollars (USP) to the dollar, which fell to nearly $0.32 at the time of writing.