Leaderboard
633All-time rank
BP
Bacon Protocol
Mar 5, 2022
$1.0M
Lost
$1.0M
Recovered
$0
Net loss
$1.0M
Unrecovered0% recovered
Bacon Protocol NFT mortgage lending platform was exploited via reentrancy in the lend() function. The contract used ERC777 without considering callback security, allowing an attacker to reenter lend() to obtain excessive lending credits and drain ~$1M.
How the exploit worked
View reproducible PoCReentrancy.
Lost: $1 million
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Mar 5, 2022Exploit executed — $1.0M drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)