Rekt: Astroport

Astroport, a DEX on the Terra network, lost roughly $6.4 million on July 30 in a hack that exploited a reentrancy vulnerability in the timeout callback of ibc-hooks. The article says the bug had been patched in April but was accidentally reintroduced in Terra's June upgrade. Terra's validators halted the chain, and validators holding over 67% of the voting power upgraded their nodes, after which the chain resumed. According to Astroport, the attacker's Terra address holding 20 million ASTRO was frozen, and ASTRO fell roughly 56%, per Coingecko data.