Leaderboard
1043All-time rank
Ara Finance
Jun 19, 2023
$125K
Lost
$125K
Recovered
$0
Net loss
$125K
Unrecovered0% recovered
202 million USDT on BNB Chain. The contract lacked access control and held unbounded ARA and USDT approvals, allowing the attacker to steal ~$124,915.
How the exploit worked
View reproducible PoCIncorrect handling of permissions.
Lost: ~$125k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Jun 19, 2023Exploit executed — $125K drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)