News linked to both this project and an event.
Odaily News: Analysis by security firm CertiK shows that a legacy MakerDAO auction keeper contract was exploited, with the attacker draining 200 ETH worth over $500,000. According to CertiK, the root cause is a lack of access control in the 0x8804d1de function within the keeper implementation contract. This contract was involved in the March 2020 "Black Thursday" liquidation crisis, where it won ETH at zero bids. Four lots of 50 ETH each were never settled, and the attacker used this to drain the funds, transferring them out via Tornado Cash in batches of 10 ETH each. This contract is not part of the current Sky ecosystem core, but old contracts still holding funds may remain potential attack targets.
Sky (formerly MakerDAO) announced on X that the cross-chain bridging of USDS OFT on the Solana network, which was suspended due to the security review of the rsETH vulnerability incident, has resumed operation.Sky emphasized that during the review, its USDS-related contracts and the protocol itself were not affected. USDS has always maintained a fully overcollateralized state as designed, which can be verified in real-time on-chain. The suspension was a precautionary security measure. Currently, the bridging function on the Solana side has been reopened, while the Avalanche-related bridging will resume after further review is completed.
Sky (formerly MakerDAO) announced on X that it has temporarily suspended the cross-chain bridging functionality for its omnichain fungible token (OFT) USDS. The team will further assess the impact of the recent rsETH security incident. Sky emphasized that its protocol and the USDS smart contract remain unaffected at this time, and USDS continues to be fully collateralized as designed—verifiable on-chain at any time.