Leaderboard
482All-time rank
A
Akropolis
Nov 12, 2020
$2.0M
Lost
$2.0M
Recovered
$0
Net loss
$2.0M
Unrecovered0% recovered
On November 12, 2020, Akropolis lost $2 million in DAI from its yCurve and sUSD pools. The attacker used a flash loan to exploit a bug in the SavingsModule smart contract where the deposit logic minted tokens twice, allowing withdrawal of double the intended amount.
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Nov 12, 2020Exploit executed — $2.0M drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%