Leaderboard
770All-time rank
B
Balancer
Jun 28, 2020
$500K
Lost
$500K
Recovered
$0
Net loss
$500K
Unrecovered0% recovered
Balancer pools holding deflationary tokens (like STA which burns 1% per transfer) were exploited. An attacker used a dYdX flashloan to repeatedly trade between STA and ETH, depleting STA to 1 wei while Balancer's balance tracking failed to account for the fee burns.
They extracted ETH, WBTC, LINK and SNX from severely imbalanced pools.
How the exploit worked
View reproducible PoCToken Incompatible.
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Incorrect Share Accounting
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jun 28, 2020Exploit executed — $500K drained via incorrect share accounting
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)
