Leaderboard
797All-time rank
A
Aurellion
May 12, 2026
$456K
Lost
$456K
Recovered
$0
Net loss
$456K
Unrecovered0% recovered
53 USDC on May 12, 2026 after incomplete Diamond Proxy initialization left the SafeOwnable facet's _initialized slot at zero. The attacker called initialize() to seize ownership and inject a draining facet.
- Target
- Other
- Classification
- Access Control
- Technique
- Uninitialized Proxy
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- May 12, 2026Exploit executed — $456K drained via uninitialized proxy
- Attributed to Unknown
- Recovery status Unrecovered 0%