Leaderboard
1158All-time rank
A
AES
Dec 7, 2022
$62K
Lost
$62K
Recovered
$0
Net loss
$62K
Unrecovered0% recovered
AES, a deflationary token on BSC, was exploited through abuse of its skim function. The attacker repeatedly sent AES tokens to the AES-USDT pair to break the pool balance, then called skim to extract surplus tokens.
Each cycle burned additional AES tokens, allowing profitable conversion of small token amounts into large USDT payouts.
How the exploit worked
View reproducible PoCBusiness Logic Flaw & FlashLoan price manipulation.
Lost: $60k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Rounding Error
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Dec 7, 2022Exploit executed — $62K drained via rounding error
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)
