Leaderboard
27All-time rank
Beanstalk
Apr 17, 2022
$181M
Lost
$181M
Recovered
$0
Net loss
$181M
Unrecovered0% recovered
An attacker flashloaned $1B+ from Aave, Uniswap, and SushiSwap to gain 2/3 governance voting power and execute malicious proposals (Bip18 to drain the protocol, Bip19 to donate to Ukraine as cover), stealing $181M in non-Bean assets.
How the exploit worked
View reproducible PoCDAO + Flashloan.
Lost: $182 million
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Governance
- Technique
- Flashloan Governance Attack
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Apr 17, 2022Exploit executed — $181M drained via flashloan governance attack
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)