Growth DeFi Hack - Revision history

Azoundria at 18:50, 2 May 2023

2023-05-02T18:50:39Z

← Older revision		Revision as of 12:50, 2 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/growthdefihack.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/growthdefihack.php}}
	{{Unattributed ~~Citations~~}}		{{Unattributed Sources}}

	[[File:Growthdefi.jpg\|thumb\|Growth DeFi]]A successfully audited smart contract still contained an exploit. This exploit enabled a very smart individual to extract funds from the platform's hot wallets. That smart individual decided to keep the money.		[[File:Growthdefi.jpg\|thumb\|Growth DeFi]]A successfully audited smart contract still contained an exploit. This exploit enabled a very smart individual to extract funds from the platform's hot wallets. That smart individual decided to keep the money.
Line 6:		Line 6:
	Affected users are given the equivalent of 15% of their money back.		Affected users are given the equivalent of 15% of their money back.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="rekt-513" /><ref name="rektnews-737" /><ref name="r0bster97twitter-752" /><ref name="growthdefimedium-753" /><ref name="etherscan-754" /><ref name="reddit-755" /><ref name="reddit-756" /><ref name="cryptobuyingtips-757" /><ref name="blockthreat-740" /><ref name="growthdefi-758" /><ref name="consensys-759" /><ref name="growthdefitwitter-760" /><ref name="growthdefitwitter-761" /><ref name="growthdefimedium-762" /><ref name="growthdefigithub-1176" /><ref name="openblocksecgithub-2342" /><ref name="originprotocolgithub-2351" />
	<ref name="rekt-513" /><ref name="rektnews-737" /><ref name="r0bster97twitter-752" /><ref name="growthdefimedium-753" /><ref name="etherscan-754" /><ref name="reddit-755" /><ref name="reddit-756" /><ref name="cryptobuyingtips-757" /><ref name="blockthreat-740" /><ref name="growthdefi-758" /><ref name="consensys-759" /><ref name="growthdefitwitter-760" /><ref name="growthdefitwitter-761" /><ref name="growthdefimedium-762" /><ref name="growthdefigithub-1176" /><ref name="openblocksecgithub-2342" /><ref name="originprotocolgithub-2351" />

	== About Growth DeFi ==		== About Growth DeFi ==
Line 65:		Line 64:
	!Description		!Description
	\|-		\|-
	\|February 8th, 2021 ~~12:00:00 AM~~		\|February 8th, 2021
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 73:		Line 72:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 92:		Line 94:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
	== Prevention Policies ==
	It's impossible to prove definitively that a smart contract is secure, and smart contracts operate live, enabling a hacker to steal funds immediately.		It's impossible to prove definitively that a smart contract is secure, and smart contracts operate live, enabling a hacker to steal funds immediately.

	On the other hand, an offline air-gapped wallet is not remotely reachable, and when setting up so multiple signatures are required for withdrawals, this can prevent theft by any single individual.		On the other hand, an offline air-gapped wallet is not remotely reachable, and when setting up so multiple signatures are required for withdrawals, this can prevent theft by any single individual.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==
	<references><ref name="rekt-513">[https://rekt.news/leaderboard/ Rekt - Leaderboard] (May 12, 2021)</ref>		<references><ref name="rekt-513">[https://rekt.news/leaderboard/ Rekt - Leaderboard] (May 13, 2021)</ref>

	<ref name="rektnews-737">[https://rekt.news/the-big-combo/ Rekt - The Big Combo (Growth DeFi - REKT)] (May 15, 2021)</ref>		<ref name="rektnews-737">[https://rekt.news/the-big-combo/ Rekt - The Big Combo (Growth DeFi - REKT)] (May 16, 2021)</ref>

	<ref name="r0bster97twitter-752">[https://twitter.com/r0bster97/status/1358858462579539968 @r0bster97 Twitter] (May 18, 2021)</ref>		<ref name="r0bster97twitter-752">[https://twitter.com/r0bster97/status/1358858462579539968 @r0bster97 Twitter] (May 19, 2021)</ref>

	<ref name="growthdefimedium-753">[https://growthdefi.medium.com/raave-farming-contract-exploit-explained-f3b6f0b3c1b3 Raave Farming Contract Exploit Explained] (May 18, 2021)</ref>		<ref name="growthdefimedium-753">[https://growthdefi.medium.com/raave-farming-contract-exploit-explained-f3b6f0b3c1b3 Raave Farming Contract Exploit Explained] (May 19, 2021)</ref>

	<ref name="etherscan-754">[https://etherscan.io/tx/0x47cc8504f870020d5e5a8a5f0e2c242cc790b7fbc0dffb183e2f20a668fc076e Ethereum Transaction Hash (Txhash) Details \| Etherscan] (May 18, 2021)</ref>		<ref name="etherscan-754">[https://etherscan.io/tx/0x47cc8504f870020d5e5a8a5f0e2c242cc790b7fbc0dffb183e2f20a668fc076e Ethereum Transaction Hash (Txhash) Details \| Etherscan] (May 19, 2021)</ref>

	<ref name="reddit-755">[https://www.reddit.com/r/CryptoMoonShots/comments/lfzkft/gro_growth_defi_hacked/ $GRO Growth defi hacked : CryptoMoonShots] (May 18, 2021)</ref>		<ref name="reddit-755">[https://www.reddit.com/r/CryptoMoonShots/comments/lfzkft/gro_growth_defi_hacked/ $GRO Growth defi hacked : CryptoMoonShots] (May 19, 2021)</ref>

	<ref name="reddit-756">[https://www.reddit.com/user/RevolutionarySider/comments/mfs374/growth_defi_crypto_assets_company_being_totally/ Growth DEFI crypto assets company being totally dismissive on their investors : RevolutionarySider] (May 18, 2021)</ref>		<ref name="reddit-756">[https://www.reddit.com/user/RevolutionarySider/comments/mfs374/growth_defi_crypto_assets_company_being_totally/ Growth DEFI crypto assets company being totally dismissive on their investors : RevolutionarySider] (May 19, 2021)</ref>

	<ref name="cryptobuyingtips-757">[https://cryptobuyingtips.com/guides/how-to-buy-growthdefi-gro How To Buy GrowthDeFi GRO] (May 18, 2021)</ref>		<ref name="cryptobuyingtips-757">[https://cryptobuyingtips.com/guides/how-to-buy-growthdefi-gro How To Buy GrowthDeFi GRO] (May 19, 2021)</ref>

	<ref name="blockthreat-740">[https://blockthreat.substack.com/p/blockthreat-week-6-2021 BlockThreat Week 6 2021] (May 18, 2021)</ref>		<ref name="blockthreat-740">[https://blockthreat.substack.com/p/blockthreat-week-6-2021 BlockThreat Week 6 2021] (May 19, 2021)</ref>

	<ref name="growthdefi-758">[https://growthdefi.com/ GrowthDefi Homepage] (May 19, 2021)</ref>		<ref name="growthdefi-758">[https://growthdefi.com/ GrowthDefi Homepage] (May 20, 2021)</ref>

	<ref name="consensys-759">[https://consensys.net/diligence/audits/2020/12/growth-defi-v1/ Growth Defi V1 \| ConsenSys Diligence] (May 19, 2021)</ref>		<ref name="consensys-759">[https://consensys.net/diligence/audits/2020/12/growth-defi-v1/ Growth Defi V1 \| ConsenSys Diligence] (May 20, 2021)</ref>

	<ref name="growthdefitwitter-760">[https://twitter.com/GrowthDefi/status/1358903523946151940 @GrowthDefi Twitter] (May 19, 2021)</ref>		<ref name="growthdefitwitter-760">[https://twitter.com/GrowthDefi/status/1358903523946151940 @GrowthDefi Twitter] (May 20, 2021)</ref>

	<ref name="growthdefitwitter-761">[https://twitter.com/GrowthDefi/status/1359308924701310976 @GrowthDefi Twitter] (May 19, 2021)</ref>		<ref name="growthdefitwitter-761">[https://twitter.com/GrowthDefi/status/1359308924701310976 @GrowthDefi Twitter] (May 20, 2021)</ref>

	<ref name="growthdefimedium-762">[https://growthdefi.medium.com/the-future-of-raave-58be3063dfdb The Future Of Raave] (May 19, 2021)</ref>		<ref name="growthdefimedium-762">[https://growthdefi.medium.com/the-future-of-raave-58be3063dfdb The Future Of Raave] (May 20, 2021)</ref>

	<ref name="growthdefigithub-1176">[https://github.com/GrowthDeFi/growthdefi-v1-core GitHub - GrowthDeFi/growthdefi-v1-core: GrowthDeFi V1 Core smart contracts] (Jun 26, 2021)</ref>		<ref name="growthdefigithub-1176">[https://github.com/GrowthDeFi/growthdefi-v1-core GitHub - GrowthDeFi/growthdefi-v1-core: GrowthDeFi V1 Core smart contracts] (Jun 27, 2021)</ref>

	<ref name="openblocksecgithub-2342">[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10, 2021)</ref>		<ref name="openblocksecgithub-2342">[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 11, 2021)</ref>

	<ref name="originprotocolgithub-2351">[https://github.com/OriginProtocol/security/blob/master/incidents/2021-02-10-Growth-Defi.md security/2021-02-10-Growth-Defi.md at master · OriginProtocol/security · GitHub] (Aug 10, 2021)</ref></references>		<ref name="originprotocolgithub-2351">[https://github.com/OriginProtocol/security/blob/master/incidents/2021-02-10-Growth-Defi.md security/2021-02-10-Growth-Defi.md at master · OriginProtocol/security · GitHub] (Aug 11, 2021)</ref></references>

Azoundria at 17:51, 17 February 2023

2023-02-17T17:51:52Z

← Older revision		Revision as of 11:51, 17 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/growthdefihack.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/growthdefihack.php}}
			{{Unattributed Citations}}

	[[File:Growthdefi.jpg\|thumb\|Growth DeFi]]A successfully audited smart contract still contained an exploit. This exploit enabled a very smart individual to extract funds from the platform's hot wallets. That smart individual decided to keep the money.		[[File:Growthdefi.jpg\|thumb\|Growth DeFi]]A successfully audited smart contract still contained an exploit. This exploit enabled a very smart individual to extract funds from the platform's hot wallets. That smart individual decided to keep the money.
Line 6:		Line 7:

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="rekt-513" /><ref name="rektnews-737" /><ref name="r0bster97twitter-752" /><ref name="growthdefimedium-753" /><ref name="etherscan-754" /><ref name="reddit-755" /><ref name="reddit-756" /><ref name="cryptobuyingtips-757" /><ref name="blockthreat-740" /><ref name="growthdefi-758" /><ref name="consensys-759" /><ref name="growthdefitwitter-760" /><ref name="growthdefitwitter-761" /><ref name="growthdefimedium-762" /><ref name="growthdefigithub-1176" /><ref name="openblocksecgithub-2342" /><ref name="originprotocolgithub-2351" />

	== About Growth DeFi ==		== About Growth DeFi ==
Line 43:		Line 45:

	Don't Include:		Don't Include:

	* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.		* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
	* Anything that wasn't reasonably knowable at the time of the event.		* Anything that wasn't reasonably knowable at the time of the event.
Line 65:		Line 66:
	\|-		\|-
	\|February 8th, 2021 12:00:00 AM		\|February 8th, 2021 12:00:00 AM
	\|~~First~~ Event		\|Main Event
	\|~~This is an expanded~~ description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
	\|-
	\|
	\|
	\|
	\|-		\|-
	\|		\|
Line 78:		Line 75:

	== Total Amount Lost ==		== Total Amount Lost ==
	The total amount lost ~~is unknown~~.		The total amount lost has been estimated at $1,300,000 USD.

	How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?		How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?
Line 89:		Line 86:

	== Total Amount Recovered ==		== Total Amount Recovered ==
	~~It is unknown how much was~~ recovered.		There do not appear to have been any funds recovered in this case.

	What funds were recovered? What funds were reimbursed for those affected users?		What funds were recovered? What funds were reimbursed for those affected users?
Line 102:		Line 99:

	== References ==		== References ==
	[https://rekt.news/leaderboard/ Rekt - Leaderboard] (May 12)		<references><ref name="rekt-513">[https://rekt.news/leaderboard/ Rekt - Leaderboard] (May 12, 2021)</ref>

	[https://rekt.news/the-big-combo/ Rekt - The Big Combo (Growth DeFi - REKT)] (May 15)		<ref name="rektnews-737">[https://rekt.news/the-big-combo/ Rekt - The Big Combo (Growth DeFi - REKT)] (May 15, 2021)</ref>

	[https://twitter.com/r0bster97/status/1358858462579539968 @r0bster97 Twitter] (May 18)		<ref name="r0bster97twitter-752">[https://twitter.com/r0bster97/status/1358858462579539968 @r0bster97 Twitter] (May 18, 2021)</ref>

	[https://growthdefi.medium.com/raave-farming-contract-exploit-explained-f3b6f0b3c1b3 Raave Farming Contract Exploit Explained] (May 18)		<ref name="growthdefimedium-753">[https://growthdefi.medium.com/raave-farming-contract-exploit-explained-f3b6f0b3c1b3 Raave Farming Contract Exploit Explained] (May 18, 2021)</ref>

	[https://etherscan.io/tx/0x47cc8504f870020d5e5a8a5f0e2c242cc790b7fbc0dffb183e2f20a668fc076e Ethereum Transaction Hash (Txhash) Details \| Etherscan] (May 18)		<ref name="etherscan-754">[https://etherscan.io/tx/0x47cc8504f870020d5e5a8a5f0e2c242cc790b7fbc0dffb183e2f20a668fc076e Ethereum Transaction Hash (Txhash) Details \| Etherscan] (May 18, 2021)</ref>

	[https://www.reddit.com/r/CryptoMoonShots/comments/lfzkft/gro_growth_defi_hacked/ $GRO Growth defi hacked : CryptoMoonShots] (May 18)		<ref name="reddit-755">[https://www.reddit.com/r/CryptoMoonShots/comments/lfzkft/gro_growth_defi_hacked/ $GRO Growth defi hacked : CryptoMoonShots] (May 18, 2021)</ref>

	[https://www.reddit.com/user/RevolutionarySider/comments/mfs374/growth_defi_crypto_assets_company_being_totally/ Growth DEFI crypto assets company being totally dismissive on their investors : RevolutionarySider] (May 18)		<ref name="reddit-756">[https://www.reddit.com/user/RevolutionarySider/comments/mfs374/growth_defi_crypto_assets_company_being_totally/ Growth DEFI crypto assets company being totally dismissive on their investors : RevolutionarySider] (May 18, 2021)</ref>

	[https://cryptobuyingtips.com/guides/how-to-buy-growthdefi-gro How To Buy GrowthDeFi GRO] (May 18)		<ref name="cryptobuyingtips-757">[https://cryptobuyingtips.com/guides/how-to-buy-growthdefi-gro How To Buy GrowthDeFi GRO] (May 18, 2021)</ref>

	[https://blockthreat.substack.com/p/blockthreat-week-6-2021 BlockThreat Week 6 2021] (May 18)		<ref name="blockthreat-740">[https://blockthreat.substack.com/p/blockthreat-week-6-2021 BlockThreat Week 6 2021] (May 18, 2021)</ref>

	[https://growthdefi.com/ GrowthDefi Homepage] (May 19)		<ref name="growthdefi-758">[https://growthdefi.com/ GrowthDefi Homepage] (May 19, 2021)</ref>

	[https://consensys.net/diligence/audits/2020/12/growth-defi-v1/ Growth Defi V1 \| ConsenSys Diligence] (May 19)		<ref name="consensys-759">[https://consensys.net/diligence/audits/2020/12/growth-defi-v1/ Growth Defi V1 \| ConsenSys Diligence] (May 19, 2021)</ref>

	[https://twitter.com/GrowthDefi/status/1358903523946151940 @GrowthDefi Twitter] (May 19)		<ref name="growthdefitwitter-760">[https://twitter.com/GrowthDefi/status/1358903523946151940 @GrowthDefi Twitter] (May 19, 2021)</ref>

	[https://twitter.com/GrowthDefi/status/1359308924701310976 @GrowthDefi Twitter] (May 19)		<ref name="growthdefitwitter-761">[https://twitter.com/GrowthDefi/status/1359308924701310976 @GrowthDefi Twitter] (May 19, 2021)</ref>

	[https://growthdefi.medium.com/the-future-of-raave-58be3063dfdb The Future Of Raave] (May 19)		<ref name="growthdefimedium-762">[https://growthdefi.medium.com/the-future-of-raave-58be3063dfdb The Future Of Raave] (May 19, 2021)</ref>

	[https://github.com/GrowthDeFi/growthdefi-v1-core GitHub - GrowthDeFi/growthdefi-v1-core: GrowthDeFi V1 Core smart contracts] (Jun 26)		<ref name="growthdefigithub-1176">[https://github.com/GrowthDeFi/growthdefi-v1-core GitHub - GrowthDeFi/growthdefi-v1-core: GrowthDeFi V1 Core smart contracts] (Jun 26, 2021)</ref>

	[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)		<ref name="openblocksecgithub-2342">[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10, 2021)</ref>

	[https://github.com/OriginProtocol/security/blob/master/incidents/2021-02-10-Growth-Defi.md security/2021-02-10-Growth-Defi.md at master · OriginProtocol/security · GitHub] (Aug 10)		<ref name="originprotocolgithub-2351">[https://github.com/OriginProtocol/security/blob/master/incidents/2021-02-10-Growth-Defi.md security/2021-02-10-Growth-Defi.md at master · OriginProtocol/security · GitHub] (Aug 10, 2021)</ref></references>

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/growthdefihack.php}} Growth DeFiA successfully audited smart contract still contained an exploit. This exploit enabled a very smart individual to extract funds from the platform's hot wallets. That smart individual decided to keep the money. Affected users are given the equivalent of 15% of their money back. This is a global/international case not involving a specif..."

2023-01-25T19:48:36Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/growthdefihack.php}} thumb|Growth DeFiA successfully audited smart contract still contained an exploit. This exploit enabled a very smart individual to extract funds from the platform's hot wallets. That smart individual decided to keep the money. Affected users are given the equivalent of 15% of their money back. This is a global/international case not involving a specif..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/growthdefihack.php}}

[[File:Growthdefi.jpg|thumb|Growth DeFi]]A successfully audited smart contract still contained an exploit. This exploit enabled a very smart individual to extract funds from the platform's hot wallets. That smart individual decided to keep the money.

Affected users are given the equivalent of 15% of their money back.

This is a global/international case not involving a specific country.

== About Growth DeFi ==
"GROWTH claims to be a DeFi ecosystem on the Ethereum blockchain built to maximize yields from the top DeFi protocols, introducing liquidity provider exposure without suffering from impermanent loss." "Growth DeFi provides an easy way to maximize the yield users can generate with their tokens by using PMTs & gTokens, GRO is the token of the protocol and when staked it has governance rights over the stkGRO DAO and shares the profits generated from the fees charged in PMTs & gTokens." "[T]he project was successfully audited by Consensys Dilligence"

"An attacker created a Fake ERC-20 token named rAXZZ and an associated with it an Uniswap V2 Liquidity Pool paired it with GRO (GRO/rAXZZ)."

"Due to a vulnerability in the stkGRO/rAAVE contract — which did not properly check the match between the LP assets and the token being deposited — allowed the deposit to be accepted. It was forwarded to the Uniswap V2 Router which routed (as instructed by the stkGRO/rAAVE) the swap and subsequent liquidity provision via the fake LP."

"The 5056 GRO/rAXZZ LP shares obtained were then mistakenly taken by the stkGRO/rAAVE contract as legitimate GRO/rAAVE LP shares. It then accepted them in exchange for 14513 newly minted stkGRO/rAAVE shares."

"Once on hold of the 14513 stkGRO/rAAVE shares the attacker proceeded to withdraw the 5056 GRO/rAAVE LP shares from the stkGRO/rAAVE contract using the simple withdrawal function, that returns to the staker GRO/rAAVE LP shares and burns the provided stkGRO/rAAVE shares."

"The team will further review the contracts and provide a new deployment for the staking contracts at the right time."

"We have decided to migrate rAAVE to a new token called gROOT which won’t rebase, this is being done to mitigate future vulnerabilities that may come up otherwise with rebasing."

"We have taken snapshots of the farming LP balances before the exploit happened. 1.4 MM $ was drained by the attacker, of which 12% was from users (168,000 $). We will issue 168,000 SAFE proportionally to the stkGRO/rAAVE tokens held in the farming contract before the exploit happened."

"SAFE tokens will be airdropped to BSC wallets. SAFE tokens will be bought up in the future for up to 1$ each as the protocol earns fees from the different products it offers, it won’t be instant but eventually all of the tokens will be bought back and destroyed."

As one affected user Francis said, "We should be getting the value of our gro back at the time the snapshot was taken before the hack. You are penalising investors for the hack by paying us the value after he had market dumped everything and crashed the price. Or at the very least you should pay us back in $gro like we deposited, so we have the chance for the price to rebound and recover our money. This way you are capping our compensation at like 15% of what we put in. This was an error on your part and you are penalising us for it. This isnt making things right?"

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:

* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Growth DeFi Hack
!Date
!Event
!Description
|-
|February 8th, 2021 12:00:00 AM
|First Event
|This is an expanded description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost is unknown.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
It is unknown how much was recovered.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
It's impossible to prove definitively that a smart contract is secure, and smart contracts operate live, enabling a hacker to steal funds immediately.

On the other hand, an offline air-gapped wallet is not remotely reachable, and when setting up so multiple signatures are required for withdrawals, this can prevent theft by any single individual.

== References ==
[https://rekt.news/leaderboard/ Rekt - Leaderboard] (May 12)

[https://rekt.news/the-big-combo/ Rekt - The Big Combo (Growth DeFi - REKT)] (May 15)

[https://twitter.com/r0bster97/status/1358858462579539968 @r0bster97 Twitter] (May 18)

[https://growthdefi.medium.com/raave-farming-contract-exploit-explained-f3b6f0b3c1b3 Raave Farming Contract Exploit Explained] (May 18)

[https://etherscan.io/tx/0x47cc8504f870020d5e5a8a5f0e2c242cc790b7fbc0dffb183e2f20a668fc076e Ethereum Transaction Hash (Txhash) Details | Etherscan] (May 18)

[https://www.reddit.com/r/CryptoMoonShots/comments/lfzkft/gro_growth_defi_hacked/ $GRO Growth defi hacked : CryptoMoonShots] (May 18)

[https://www.reddit.com/user/RevolutionarySider/comments/mfs374/growth_defi_crypto_assets_company_being_totally/ Growth DEFI crypto assets company being totally dismissive on their investors : RevolutionarySider] (May 18)

[https://cryptobuyingtips.com/guides/how-to-buy-growthdefi-gro How To Buy GrowthDeFi GRO] (May 18)

[https://blockthreat.substack.com/p/blockthreat-week-6-2021 BlockThreat Week 6 2021] (May 18)

[https://growthdefi.com/ GrowthDefi Homepage] (May 19)

[https://consensys.net/diligence/audits/2020/12/growth-defi-v1/ Growth Defi V1 | ConsenSys Diligence] (May 19)

[https://twitter.com/GrowthDefi/status/1358903523946151940 @GrowthDefi Twitter] (May 19)

[https://twitter.com/GrowthDefi/status/1359308924701310976 @GrowthDefi Twitter] (May 19)

[https://growthdefi.medium.com/the-future-of-raave-58be3063dfdb The Future Of Raave] (May 19)

[https://github.com/GrowthDeFi/growthdefi-v1-core GitHub - GrowthDeFi/growthdefi-v1-core: GrowthDeFi V1 Core smart contracts] (Jun 26)

[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)

[https://github.com/OriginProtocol/security/blob/master/incidents/2021-02-10-Growth-Defi.md security/2021-02-10-Growth-Defi.md at master · OriginProtocol/security · GitHub] (Aug 10)