Leaderboard
296All-time rank
A
Audius
Jul 25, 2022
$6.0M
Lost
$6.0M
Recovered
$0
Net loss
$6.0M
Unrecovered0% recovered
On July 23-25, 2022, Audius governance contracts were compromised when an attacker exploited a missing initialization guard allowing repeated invoke() calls. The attacker drained 18 million AUDIO tokens (~$6M) from the treasury and attempted to delegate 10 trillion tokens to controlled wallets.
How the exploit worked
View reproducible PoCStorage Collision & Malicious Proposal.
Lost: 704 ETH (~1.08M US$)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Governance
- Technique
- Malicious Proposal
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jul 25, 2022Exploit executed — $6.0M drained via malicious proposal
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)