Leaderboard
306All-time rank
Agave logo

Agave

Mar 15, 2022

$5.5M
Lost
$5.5M
Recovered
$0
Net loss
$5.5M
Unrecovered0% recovered

On Gnosis Chain, attackers exploited xDAI's non-standard _callAfterTransfer() callback reentrancy; using flashloans to stack borrows before balance updates, they withdrew amounts far exceeding collateral value.

How the exploit worked

View reproducible PoC

ERC667 Reentrancy.

Lost: $1.5 million

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Reentrancy
Technique
Reentrancy
Attribution
Unknown
Chains
Gnosis Chain

Event timeline

  1. Mar 15, 2022
    Exploit executed — $5.5M drained via reentrancy
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents